[ALSA-2026:82280] Moderate: tftp security update
Type:
security
Severity:
moderate
Release date:
2026-10-14
Description:
The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine. Security Fix(es): * tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 tftp-server-5.2-50.el10_2.aarch64.rpm 01db45eae15e3e453fec52b33071640249baf7b979f9bb4fc685138307747b90
aarch64 tftp-5.2-50.el10_2.aarch64.rpm 762277cef69d0f12535996ffa4debe8fdc45106a6e8f460ea59482e21b678c7e
ppc64le tftp-5.2-50.el10_2.ppc64le.rpm 057d45d9b863f77628cfa48a98dc8fce16ebfd19fe8391271eb322bc9e62ba0b
ppc64le tftp-server-5.2-50.el10_2.ppc64le.rpm 471f0e7d4490dc97ea8c63cfc24744cbbef06da6bc6cc9e3522f223390cbbf06
s390x tftp-5.2-50.el10_2.s390x.rpm 4a7d3eb6c141fd35c502ffb1bbf186a6761e009a21756ef1d119a0fd7c15bf65
s390x tftp-server-5.2-50.el10_2.s390x.rpm c090bb714d55c7b3b1299820a1a3e1821aa2398d7336bb81dd9ecdc408a2474f
x86_64 tftp-5.2-50.el10_2.x86_64.rpm 0b9bde2ded3f28dfaefa48bac481f050b6499bc701d6e01d05981849aab4fc03
x86_64 tftp-server-5.2-50.el10_2.x86_64.rpm 3acc405a96d03ece6ef9803117db3e82f7c0d91e76a7d18752e076c9161a4135
x86_64_v2 tftp-server-5.2-50.el10_2.x86_64_v2.rpm 643b6bf086d6c81e9d43e042b8bcad621bf7264404c81f2af4bd640cfe2b059f
x86_64_v2 tftp-5.2-50.el10_2.x86_64_v2.rpm abbd0a21719f8ae48bc0904a5944fcd2a41c7f6ab57ae4131bb677cd184eec6a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.