Synopsis
Moderate: tftp security update
Description
The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine.
Security Fix(es):
* tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 aarch64
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2460997
CVEs
CVE-2026-85234
Affected packages
Rocky Linux 9 aarch64 - AppStream
tftp-0:5.2-40.el9_8.1.aarch64.rpm
tftp-0:5.2-40.el9_8.1.src.rpm
tftp-debuginfo-0:5.2-40.el9_8.1.aarch64.rpm
tftp-debugsource-0:5.2-40.el9_8.1.aarch64.rpm
tftp-server-0:5.2-40.el9_8.1.aarch64.rpm
tftp-server-debuginfo-0:5.2-40.el9_8.1.aarch64.rpm
Rocky Linux 9 ppc64le - AppStream
tftp-0:5.2-40.el9_8.1.ppc64le.rpm
tftp-0:5.2-40.el9_8.1.src.rpm
tftp-debuginfo-0:5.2-40.el9_8.1.ppc64le.rpm
tftp-debugsource-0:5.2-40.el9_8.1.ppc64le.rpm
tftp-server-0:5.2-40.el9_8.1.ppc64le.rpm
tftp-server-debuginfo-0:5.2-40.el9_8.1.ppc64le.rpm
Rocky Linux 9 s390x - AppStream
tftp-0:5.2-40.el9_8.1.s390x.rpm
tftp-0:5.2-40.el9_8.1.src.rpm
tftp-debuginfo-0:5.2-40.el9_8.1.s390x.rpm
tftp-debugsource-0:5.2-40.el9_8.1.s390x.rpm
tftp-server-0:5.2-40.el9_8.1.s390x.rpm
tftp-server-debuginfo-0:5.2-40.el9_8.1.s390x.rpm
Rocky Linux 9 x86_64 - AppStream
tftp-0:5.2-40.el9_8.1.src.rpm
tftp-0:5.2-40.el9_8.1.x86_64.rpm
tftp-debuginfo-0:5.2-40.el9_8.1.x86_64.rpm
tftp-debugsource-0:5.2-40.el9_8.1.x86_64.rpm
tftp-server-0:5.2-40.el9_8.1.x86_64.rpm
tftp-server-debuginfo-0:5.2-40.el9_8.1.x86_64.rpm