# List of RPMs for HyperScale X Platform Version 2.2602

The following RPMs are included in this version:

RPM | Issue
--- | ---
glib2-2.56.1-11.el7_9.x86_64.rpm | - Add patch for CVE-2025-13601
glib2-devel-2.56.1-11.el7_9.x86_64.rpm | - Add patch for CVE-2025-13601
gnupg2-2.0.22-5.el7_9.1.x86_64.rpm | - Fix CVE-2025-68973 (gpg.fail/memcpy)
java-1.8.0-openjdk-headless-1.8.0.482.b08-1.el7_9.x86_64.rpm | - Update to 8u482-b08 (GA).
- Update release notes for 8u482-b08.
- Turn on system FreeType as on later JDK versions and add to _privatelibs
- Set bundled FreeType version to 2.13.2 following JDK-8316028
- Bump LCMS 2 version to 2.14.0 following JDK-8297088
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-142688
- Resolves: RHEL-139512
- Resolves: RHEL-142692
- Resolves: RHEL-142695
kernel-3.10.0-1160.146.1.el7.x86_64.rpm | - i40e: fix idx validation in config queues msg (Arif Badar) [RHEL-123796] {CVE-2025-39971}
- i40e: add validation for ring_len param (Arif Badar) [RHEL-123796] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Arif Badar) [RHEL-123796]
- e1000e: fix heap overflow in e1000_set_eeprom (Marc Milgram) [RHEL-123102] {CVE-2025-39898}
- vsock: Ignore signal/timeout on connect() if already established (Xiubo Li) [RHEL-139263] {CVE-2025-40248}
- vsock: remove vsock from connected table when connect is interrupted by a signal (Xiubo Li) [RHEL-139263]
- vsock: avoid to close connected socket after the timeout (Xiubo Li) [RHEL-139263]
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-126856] {CVE-2025-37823}
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (John Pittman) [RHEL-121313]
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313] {CVE-2023-53675}
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313]
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (John Pittman) [RHEL-121313]
- libceph: fix potential use-after-free in have_mon_and_osd_map() (Xiubo Li) [RHEL-137390] {CVE-2025-68285}
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (CKI Backport Bot) [RHEL-124738] {CVE-2023-53705}
kernel-devel-3.10.0-1160.146.1.el7.x86_64.rpm | - i40e: fix idx validation in config queues msg (Arif Badar) [RHEL-123796] {CVE-2025-39971}
- i40e: add validation for ring_len param (Arif Badar) [RHEL-123796] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Arif Badar) [RHEL-123796]
- e1000e: fix heap overflow in e1000_set_eeprom (Marc Milgram) [RHEL-123102] {CVE-2025-39898}
- vsock: Ignore signal/timeout on connect() if already established (Xiubo Li) [RHEL-139263] {CVE-2025-40248}
- vsock: remove vsock from connected table when connect is interrupted by a signal (Xiubo Li) [RHEL-139263]
- vsock: avoid to close connected socket after the timeout (Xiubo Li) [RHEL-139263]
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-126856] {CVE-2025-37823}
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (John Pittman) [RHEL-121313]
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313] {CVE-2023-53675}
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313]
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (John Pittman) [RHEL-121313]
- libceph: fix potential use-after-free in have_mon_and_osd_map() (Xiubo Li) [RHEL-137390] {CVE-2025-68285}
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (CKI Backport Bot) [RHEL-124738] {CVE-2023-53705}
kernel-headers-3.10.0-1160.146.1.el7.x86_64.rpm | - i40e: fix idx validation in config queues msg (Arif Badar) [RHEL-123796] {CVE-2025-39971}
- i40e: add validation for ring_len param (Arif Badar) [RHEL-123796] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Arif Badar) [RHEL-123796]
- e1000e: fix heap overflow in e1000_set_eeprom (Marc Milgram) [RHEL-123102] {CVE-2025-39898}
- vsock: Ignore signal/timeout on connect() if already established (Xiubo Li) [RHEL-139263] {CVE-2025-40248}
- vsock: remove vsock from connected table when connect is interrupted by a signal (Xiubo Li) [RHEL-139263]
- vsock: avoid to close connected socket after the timeout (Xiubo Li) [RHEL-139263]
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-126856] {CVE-2025-37823}
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (John Pittman) [RHEL-121313]
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313] {CVE-2023-53675}
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313]
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (John Pittman) [RHEL-121313]
- libceph: fix potential use-after-free in have_mon_and_osd_map() (Xiubo Li) [RHEL-137390] {CVE-2025-68285}
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (CKI Backport Bot) [RHEL-124738] {CVE-2023-53705}
libsoup-2.62.2-10.el7_9.x86_64.rpm | - Backport patch for CVE-2025-14523
net-snmp-5.7.2-49.el7_9.5.x86_64.rpm | - Fix out-of-bounds access in snmptrapd (CVE-2025-68615)
net-snmp-agent-libs-5.7.2-49.el7_9.5.x86_64.rpm | - Fix out-of-bounds access in snmptrapd (CVE-2025-68615)
net-snmp-libs-5.7.2-49.el7_9.5.x86_64.rpm | - Fix out-of-bounds access in snmptrapd (CVE-2025-68615)
net-snmp-utils-5.7.2-49.el7_9.5.x86_64.rpm | - Fix out-of-bounds access in snmptrapd (CVE-2025-68615)
openssl-1.0.2k-26.el7_9.1.x86_64.rpm | - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128610
openssl-libs-1.0.2k-26.el7_9.1.x86_64.rpm | - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128610
python-2.7.5-94.el7_9.2.x86_64.rpm | - Fix: Security fix for CVE-2025-12084
- Resolves: RHEL-135934
- Fix: Security fix for CVE-2025-8194
- Resolves: RHEL-106331
python-libs-2.7.5-94.el7_9.2.x86_64.rpm | - Fix: Security fix for CVE-2025-12084
- Resolves: RHEL-135934
- Fix: Security fix for CVE-2025-8194
- Resolves: RHEL-106331
python-perf-3.10.0-1160.146.1.el7.x86_64.rpm | - i40e: fix idx validation in config queues msg (Arif Badar) [RHEL-123796] {CVE-2025-39971}
- i40e: add validation for ring_len param (Arif Badar) [RHEL-123796] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Arif Badar) [RHEL-123796]
- e1000e: fix heap overflow in e1000_set_eeprom (Marc Milgram) [RHEL-123102] {CVE-2025-39898}
- vsock: Ignore signal/timeout on connect() if already established (Xiubo Li) [RHEL-139263] {CVE-2025-40248}
- vsock: remove vsock from connected table when connect is interrupted by a signal (Xiubo Li) [RHEL-139263]
- vsock: avoid to close connected socket after the timeout (Xiubo Li) [RHEL-139263]
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-126856] {CVE-2025-37823}
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (John Pittman) [RHEL-121313]
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313] {CVE-2023-53675}
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (John Pittman) [RHEL-121313]
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (John Pittman) [RHEL-121313]
- libceph: fix potential use-after-free in have_mon_and_osd_map() (Xiubo Li) [RHEL-137390] {CVE-2025-68285}
- ipv6: Fix out-of-bounds access in ipv6_find_tlv() (CKI Backport Bot) [RHEL-124738] {CVE-2023-53705}
python-s3transfer-0.1.13-1.el7_9.5.noarch.rpm | - bundled urllib3: fix CVE-2025-66471
Resolves: RHEL-139754
- bundled urllib3: fix CVE-2025-66418
Resolves: RHEL-136025
resource-agents-4.1.1-61.el7_9.22.x86_64.rpm | - bundled urllib3: fix CVE-2025-66471
Resolves: RHEL-139755
- bundled urllib3: fix CVE-2025-66418
Resolves: RHEL-136026

×

Loading...