The following RPMs are included in this version:
| RPM | Issue |
|---|---|
| kernel-3.10.0-1160.153.1.el7.x86_64.rpm | - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171424] {CVE-2026-31607} |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171144] {CVE-2026-31685} | |
| - smb: client: reject userspace cifs.spnego descriptions (Gonzalo Siero) [RHEL-180748] {CVE-2026-46243} | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174208] {CVE-2026-43190} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - md/bitmap: fix GPF in write_page caused by resize race (John Pittman) [RHEL-174086] {CVE-2026-43163} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - wifi: brcmfmac: validate bsscfg indices in IF events (Omkar Patil) [RHEL-173852] {CVE-2026-43110} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Deepakkumar Karn) [RHEL-156867] {CVE-2026-23243} | |
| - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CKI Backport Bot) [RHEL-172635] {CVE-2026-43037} | |
| - RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester (Marc Milgram) [RHEL-168608] | |
| kernel-devel-3.10.0-1160.153.1.el7.x86_64.rpm | - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171424] {CVE-2026-31607} |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171144] {CVE-2026-31685} | |
| - smb: client: reject userspace cifs.spnego descriptions (Gonzalo Siero) [RHEL-180748] {CVE-2026-46243} | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174208] {CVE-2026-43190} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - md/bitmap: fix GPF in write_page caused by resize race (John Pittman) [RHEL-174086] {CVE-2026-43163} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - wifi: brcmfmac: validate bsscfg indices in IF events (Omkar Patil) [RHEL-173852] {CVE-2026-43110} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Deepakkumar Karn) [RHEL-156867] {CVE-2026-23243} | |
| - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CKI Backport Bot) [RHEL-172635] {CVE-2026-43037} | |
| - RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester (Marc Milgram) [RHEL-168608] | |
| kernel-headers-3.10.0-1160.153.1.el7.x86_64.rpm | - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171424] {CVE-2026-31607} |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171144] {CVE-2026-31685} | |
| - smb: client: reject userspace cifs.spnego descriptions (Gonzalo Siero) [RHEL-180748] {CVE-2026-46243} | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174208] {CVE-2026-43190} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - md/bitmap: fix GPF in write_page caused by resize race (John Pittman) [RHEL-174086] {CVE-2026-43163} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - wifi: brcmfmac: validate bsscfg indices in IF events (Omkar Patil) [RHEL-173852] {CVE-2026-43110} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Deepakkumar Karn) [RHEL-156867] {CVE-2026-23243} | |
| - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CKI Backport Bot) [RHEL-172635] {CVE-2026-43037} | |
| - RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester (Marc Milgram) [RHEL-168608] | |
| libexif-0.6.22-3.el7_9.x86_64.rpm | - Fix integer underflow in MakerNote decoding (CVE-2026-40386) |
| - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385) | |
| Resolves: RHEL-170242, RHEL-170219 | |
| libsoup-2.62.2-12.el7_9.x86_64.rpm | - Backport patch for CVE-2026-5119 |
| - Run testsuite during RPM check phase | |
| libtiff-4.0.3-35.el7_9.2.x86_64.rpm | - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile |
| python-perf-3.10.0-1160.153.1.el7.x86_64.rpm | - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171424] {CVE-2026-31607} |
| - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171144] {CVE-2026-31685} | |
| - smb: client: reject userspace cifs.spnego descriptions (Gonzalo Siero) [RHEL-180748] {CVE-2026-46243} | |
| - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174208] {CVE-2026-43190} | |
| - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174049] {CVE-2026-43158} | |
| - md/bitmap: fix GPF in write_page caused by resize race (John Pittman) [RHEL-174086] {CVE-2026-43163} | |
| - can: raw: fix ro->uniq use-after-free in raw_rcv() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - can: af_can: export can_sock_destruct() (Jorge San Emeterio Villalain) [RHEL-170748] {CVE-2026-31532} | |
| - wifi: brcmfmac: validate bsscfg indices in IF events (Omkar Patil) [RHEL-173852] {CVE-2026-43110} | |
| - RDMA/umad: Reject negative data_len in ib_umad_write (Deepakkumar Karn) [RHEL-156867] {CVE-2026-23243} | |
| - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CKI Backport Bot) [RHEL-172635] {CVE-2026-43037} | |
| - RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester (Marc Milgram) [RHEL-168608] | |
| rsync-3.1.2-12.el7_9.3.x86_64.rpm | - Fix CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling |
×