[ALSA-2026:18868] Important: linux-sgx security update
Type:
security
Severity:
important
Release date:
2026-05-26
Description:
The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. Security Fix(es): * qs: qs: Denial of Service via improper input validation in array parsing (CVE-2025-15284) * node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives (CVE-2026-23745) * node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition (CVE-2026-23950) * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465) * node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check (CVE-2026-24842) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
x86_64 sgx-libs-2.26-7.el9.x86_64.rpm 58c326a284befe012ea1f09dc993b5f3fbd09de05c29d027a3359caa86e06a43
x86_64 sgx-pccs-admin-2.26-7.el9.x86_64.rpm 7c88566595207668ff32f121e2014d8d36a8cf7e3b9c9e585d2fd114c8c9706c
x86_64 sgx-pckid-tool-2.26-7.el9.x86_64.rpm 8522d6282463a61717fca65f8ce830f82c91b0281e495404487778d586f2213a
x86_64 sgx-pccs-2.26-7.el9.x86_64.rpm 85c0c947244c111919bd479adfa3bfd1ec8fd275790dbaf88a1d163fffac45a8
x86_64 sgx-common-2.26-7.el9.x86_64.rpm a0300674924b51ba71e542fcb1e30f71f408f7afe25a4a63279939375a5f24aa
x86_64 tdx-qgs-2.26-7.el9.x86_64.rpm c27366ea4caec127b7fcd7bde8a26d169cd75a3989c5f509518181a8323e776b
x86_64 sgx-mpa-2.26-7.el9.x86_64.rpm c88c03251548a150befdd89f4b88d8ba704983bd4e44282e9bfa81e417c03820
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.