[ALSA-2026:80663] Moderate: tftp security update
Type:
security
Severity:
moderate
Release date:
2026-10-13
Description:
The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine. Security Fix(es): * tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 tftp-server-5.2-40.el9_8.1.aarch64.rpm aa9146f7e5818e5f7fd26a68917c3b3d8f3cb2a41e41578a1f4a0f5de9cd0699
aarch64 tftp-5.2-40.el9_8.1.aarch64.rpm d08db0aef47eb95f676f7feb47983a0c771890955e0cce4f8a0d90c821214f25
ppc64le tftp-5.2-40.el9_8.1.ppc64le.rpm 7753cdadfedef932db12125bbc7a459313d62d9c444ed4a515005f99befa092b
ppc64le tftp-server-5.2-40.el9_8.1.ppc64le.rpm c94f8ac7586d40456dfca73cb02ec92630ff7b21e96a5e8e357607eb610d9b5b
s390x tftp-5.2-40.el9_8.1.s390x.rpm 9f633c85cd98b99988c04524d8e833415b4268ad20dfdba6f577e874fccaff73
s390x tftp-server-5.2-40.el9_8.1.s390x.rpm a0aea3cb96b35c1327ce0b1effa9e511701c2ebdf7ac09114dcb413214a7083e
x86_64 tftp-server-5.2-40.el9_8.1.x86_64.rpm 66c88137c1f12e9ebf9f5f87060a4f604b957c543b4b44ac4cc0a44a77d8d6cc
x86_64 tftp-5.2-40.el9_8.1.x86_64.rpm c585af2ce7e841b247a7d45ed7f9cb40989112aefe67b1dd3b51e4bba752111f
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.