4.0.0 Confluent release¶

4.0.0 is a large internal rewrite. The server core was rebuilt on a new way of handling many nodes at once, and the code that talks to BMCs with it. Commands work the same day to day, but which platforms confluent runs on, what it needs installed, and a few defaults all changed.

Read the breaking changes first. The one most likely to catch you is hardwaremanagement.method, which no longer defaults to ipmi.

Breaking changes¶

Repository location has shifted¶

See the download page. Due to the presence of breaking changes, users must opt into the new one by updating repository to four instead of latest to perform the update.

hardwaremanagement.method now has to be set¶

nodeattrib <noderange> hardwaremanagement.method=ipmi

The attribute also declares its valid values now. A typo is rejected when you set it, rather than turning into a plugin error the next time you run a command.

PXE requires more content¶

osdeploy initialize -p

EL7 and EL8 are no longer management server targets¶

The server needs Python 3.9 or newer, and there are no longer packages for EL7 or EL8. EL9 and EL10 are the packaged Enterprise Linux targets. This is only about the machine running confluent. Nodes are unaffected, so SLES 15 and EL8 nodes remain deployable.

Python 3.13 needs a crypt module from somewhere else¶

The RPM recommends python3-legacycrypt rather than requiring it, because some 3.13 distributions package no candidate at all, so on those you have to supply one yourself.

User accounts can only be managed from the management server¶

Creating, changing, or deleting a confluent user or usergroup now needs a local connection on the management server, as root or as the confluent user. Logging in over HTTP or the web UI gives read-only access to the user list, whatever rights the account has.

A second restriction covers file paths. A confluent user with no matching operating system account can no longer point confluent at an arbitrary path, whether the file is a firmware image, a license, media to attach, or a download target. Those users get /var/lib/confluent/client_assets/ and /var/lib/confluent/private/identity_images and nothing else, because confluent has no OS identity to check ownership against. Container deployments are where this shows up, since confluent users there usually have no system account.

The dependency set changed¶

• Out: pyghmi, eventlet, greenlet, pycryptodomex, paramiko, dnspython, websocket-client
• In: aiohttp, yarl, asyncssh, cryptography

Upgrading pulls the new set in, but a site that mirrors its own repositories needs them there first.

Long-polling in the HTTP API was removed¶

The deprecated long-poll behavior went out with the old HTTP stack. Clients on the current notification path are unaffected.

Discovery enhancements¶

'Aggressive' discovery¶

nodediscover has a new -a argument. This will more aggressively probe local network segments and discovery data will be filled with types otherwise missed:

• generic-ssh: anything running ssh at all
• generic-https: anything running an https server
• generic-redfish: An otherwise uncategorized Redfish endpoint
• nvos-switch: Nvidia equipment running NVOS such as Infiniband and NVLink switches

New discovery onboarding support¶

Confluent can onboard NVOS systems (currently handles password change only) and attempt to onboard generic redfish implementations in the same way as it onboards XCC3 systems. This has been tested with some BMCs, but results are not guaranteed.

For NVOS, secret.adminpassword is used to indicate the desired admin password to set. For generic-redfish, secret.initialhardwaremanagementuser and secret.initialhardwaremanagementpassword are used to indicate the firmware initial credentials if not already at desired value.

Better handling of routed discovery¶

The 'aggressive' generic targets are invoked for routed targets. IP address may be used in contexts where MAC address is not available.

Support for fixed address DHCP offers¶

If a node has net.hwaddr set and net.lease_time specified, then it will offer up static DHCP offers for nodes with fixed addresses in an arbitrary fashion. Particularly useful if wanting to keep something like an NVOS switch DHCP managed, as the mac address will be recorded by discovery.

MegaRAC discovery and firmware updates¶

Discovery and firmware updates have been updated and extended for MegaRAC implementations.

Hardware management¶

nodeconfig now indicates pending status where possible, with a -p option to focus on such settings¶

This lets the operator know which settings are not yet actually active, according to the firmware.

nodesensors with redfish may be significantly faster¶

Where confident, it will request sensors in bulk.

Hardware management command general fixup¶

A broad pass over the Redfish and IPMI backends. BMC user accounts can be deleted and their passwords changed again, nodemedia insertion works, nodefirmware names categories beyond core, adapters, and disks, and nodereseat, nodesetboot, nodeidentify, and nodestorage work where they used to error out. An operation a platform does not support now says so instead of printing a traceback, and nodeinventory tells you when a filter matched nothing.

nodeeventlog survives a kernel panic entry and other malformed records, and a sensor sweep no longer stalls retrying reads the BMC will not serve.

nodeeventlog reads more logs of devices, and allows selective log requests¶

Some platforms publish several logs, and some publish their event log somewhere other than where confluent looked. Both are found now. You can ask for a single log rather than all of them, and the command sets an exit code when a read fails.

Raritan PDU support has been added¶

hardwaremanagement.method=raritan is now available plugin, covering outlet power control, sensors, and inventory.

EUREKA chassis support has been added¶

Confluent discovers and manages the MEGWARE EUREKA chassis. A manager address can name a port, as address:port.

OS deployment¶

SUSE 16 support has been added¶

SUSE 16 can now be imported and deployed.

EL10 and Ubuntu 26.04 improvements¶

imgutil can capture EL10, diskless runtime files get proper SELinux labels on Enterprise Linux, and Ubuntu 26.04 has a diskless profile.

deployment.storage introduced to allow more steering of the auto-disk selection logic¶

The new deployment.storage attribute takes a device name or a generic hint such as m2. The selection logic behind it recognizes SATA M.2 drives now, handles 7mm disks with no RAID volume, and puts M.2 form factor drives high in the priority list by default.

Syncfiles preserves ownership and reports failures¶

syncfileclient keeps ownership and permissions without disturbing parent directories, and it applies chown before chmod. A failure gets reported rather than silently discarded.

Untethered image unpacking can be optionally sped up¶

An untethered or uncompressed diskless boot extracts its root filesystem with unsquashfs now instead of copying it file by file, which is considerably faster, and falls back to copying if that fails. A custom image needs squashfs-tools present, and imgutil names the package when a capture target lacks it.

osdeploy fetch added to help download a number of Linux distributions¶

New subcommand that downloads install media for Rocky, AlmaLinux, Ubuntu, and Debian, on x86_64 and aarch64. It verifies the GPG signature and checksum where the distribution publishes them, and shows progress. Tab completion included.

Improved bypass of proxy environment variables¶

A proxy set in the environment no longer intercepts the calls a deploying node makes back to its management server. Node adoption ignores it too.

net.extra_settings to passthrough network settings¶

Passthrough network settings, as semicolon-delimited key=value pairs in the native syntax of the deployed OS: nmcli properties, netplan keys, or wicked ifcfg variables.

Optional TPM PCR sealing for encrypted boot¶

encryptboot accepts explicit TPM2 PCRs, and confluent uses systemd-cryptenroll where it is available. Ubuntu now seals to PCRs at first boot rather than during install, when the measurements are stable. This allows users to opt into more fragile, but more hardened auto-unlock of encrypted volumes at boot.

Genesis updates¶

Genesis is based on the latest Alma 10.x packages. Additionally, an ARM package is provided.

Stateless boot reports completion¶

Diskless boots report a booted status with a timestamp, so nodedeploy can tell a node that finished from one that is still coming up. deployment.state_last_updated is a new attribute holding the time a profile last reported a state change. nodedeploy prints it after the state, without the updated: label it used to carry, which read as an OS update.

Cross-architecture image builds¶

imgutil build --arch builds an image for an architecture other than the host's. It needs a statically linked qemu-user emulator for the target, registered in binfmt_misc. It will autodetect, when possible, if the source indicated requires it. Note that this is going to be painfully slow for compute intensive tasks in imgutil exec.

Diskless images can boot from local media¶

Initial support for booting a confluent diskless image from attached media rather than over the network. It covers the Ubuntu diskless profiles so far.

Console¶

Node video console access from terminal (nodeconsole -tv and -o to record to .mp4)¶

Remote video console in the terminal, with no external dependency to install. Keyboard input, focus changes, desktop resize, and power commands all work from inside the session. Video output when requested works asynchronously from the display, resulting in smoother performance in video even if the ssh access is slow enough to impose stuttering.

Security¶

Secureboot support for PXE¶

iPXE is updated to 2.0.0 and confluent is changed to use the iPXE shim and indicate OS shims to allow SecureBoot enabled PXE.

Secure boot key enrollment assistance¶

Genesis has mokmanager added and samples are available to use nodeconsole automation to handle MOK key enrollment in an unattended fashion. Useful if wanting to do Secureboot with compiled modules.

SSH access from web UI now uses the certificates by default¶

Before, it only supported confluent DB stored known hosts. It now consults the /etc/ssh/ssh_known_hosts as well.

Nodes can now request a TLS certificate¶

A node can ask confluent for a TLS certificate through /self/tlscert. The new pubkeys.tls_lifetime attribute sets how long it stays valid, 47 days by default.

Add auth protocol selection to SNMP and support AES256 privacy¶

For SNMP, there is more flexibility in the auth and privacy protocols.

Webauthn/Passkey enhancement¶

Passkeys may now be used to login without specifying username first

Client and tooling¶

User may now provision API keys¶

Making an HTTPS api call with {"expiration":null} to /confluent-api/sessions/current/apikey/create will offer a JWS that can be used as Authorization: Bearer <jws> instead of user/password. A POST call to /confluent-api/sessions/current/apikey/revokeall with any body will invalidate all issued tokens for the user.

CLI tools improved various reporting issues¶

Client commands print an error rather than a traceback followed by usage text, and set an exit code when a read fails. nodeshell gained a connect timeout.

confluentdbutil enhancements¶

YAML for dump and restore alongside JSON, -x to exclude an attribute and everything below it, an alternate directory to operate on, and a showattrib subcommand. Restore gives a clear error on a mismatched dump format or a nonexistent tenant instead of an obscure failure.

collate -t for tabular CSV output¶

collate -t turns label: value output into CSV, one row per node and one column per label.

confluent2dnsmasq added to inject DHCP configuration¶

Generates dnsmasq DHCP configuration from confluent. It picks the listen address off ip route and warns about entries that conflict with one another. This is not required, but can be helpful if wanting to have dnsmasq own dynamic range but also have confluent managed fixed assignments.

Documentation enhancements¶

Commands that had no man page have one now, including confluent2ansible, confluent2dnsmasq, confluent2lxca, confluent2xcat, dir2img, nodecertutil, noderename, and nodegrouprename.

Other fixes¶

Software RAID creation works with newer mdadm and with hostname-prefixed md device names. imgutil propagates image build failures instead of reporting success. A node cannot be named the same thing as a group, and proxmox handles an unreachable host and a powered down VM more gracefully.

CVEs¶

The provided genesis updates result in the following CVEs being addressed:

CVE-2005-2541, CVE-2019-19906, CVE-2020-22916, CVE-2020-35501, CVE-2021-20320, CVE-2021-20321, CVE-2021-22600, CVE-2021-25217, CVE-2021-26401, CVE-2021-28711, CVE-2021-28712, CVE-2021-28713, CVE-2021-32256, CVE-2021-33061, CVE-2021-33135, CVE-2021-3521, CVE-2021-3655, CVE-2021-36770, CVE-2021-3732, CVE-2021-3753, CVE-2021-3772, CVE-2021-38300, CVE-2021-3847, CVE-2021-3923, CVE-2021-39537, CVE-2021-39685, CVE-2021-39686, CVE-2021-39698, CVE-2021-4001, CVE-2021-4002, CVE-2021-4023, CVE-2021-4028, CVE-2021-4083, CVE-2021-41073, CVE-2021-4148, CVE-2021-4150, CVE-2021-4155, CVE-2021-41864, CVE-2021-4197, CVE-2021-4203, CVE-2021-42327, CVE-2021-43057, CVE-2021-4453, CVE-2021-4454, CVE-2021-44733, CVE-2021-45100, CVE-2021-45402, CVE-2021-45868, CVE-2021-46705, CVE-2021-46923, CVE-2021-46924, CVE-2021-46928, CVE-2021-46929, CVE-2021-46931, CVE-2021-46936, CVE-2021-47087, CVE-2021-47089, CVE-2021-47090, CVE-2021-47093, CVE-2021-47100, CVE-2021-47105, CVE-2021-47184, CVE-2021-47187, CVE-2021-47190, CVE-2021-47193, CVE-2021-47194, CVE-2021-47199, CVE-2021-47209, CVE-2021-47210, CVE-2021-47211, CVE-2021-47212, CVE-2021-47214, CVE-2021-47215, CVE-2021-47218, CVE-2021-47360, CVE-2021-47362, CVE-2021-47363, CVE-2021-47365, CVE-2021-47366, CVE-2021-47367, CVE-2021-47369, CVE-2021-47374, CVE-2021-47375, CVE-2021-47376, CVE-2021-47379, CVE-2021-47381, CVE-2021-47382, CVE-2021-47387, CVE-2021-47391, CVE-2021-47392, CVE-2021-47397, CVE-2021-47398, CVE-2021-47399, CVE-2021-47405, CVE-2021-47406, CVE-2021-47412, CVE-2021-47414, CVE-2021-47415, CVE-2021-47416, CVE-2021-47417, CVE-2021-47424, CVE-2021-47425, CVE-2021-47426, CVE-2021-47430, CVE-2021-47435, CVE-2021-47438, CVE-2021-47448, CVE-2021-47450, CVE-2021-47453, CVE-2021-47461, CVE-2021-47462, CVE-2021-47463, CVE-2021-47464, CVE-2021-47465, CVE-2021-47466, CVE-2021-47470, CVE-2021-47479, CVE-2021-47481, CVE-2021-47483, CVE-2021-47485, CVE-2021-47486, CVE-2021-47489, CVE-2021-47491, CVE-2021-47492, CVE-2021-47494, CVE-2021-47496, CVE-2021-47498, CVE-2021-47501, CVE-2021-47503, CVE-2021-47504, CVE-2021-47514, CVE-2021-47523, CVE-2021-47540, CVE-2021-47541, CVE-2021-47544, CVE-2021-47552, CVE-2021-47553, CVE-2021-47562, CVE-2021-47563, CVE-2021-47565, CVE-2021-47566, CVE-2021-47567, CVE-2021-47571, CVE-2021-47577, CVE-2021-47582, CVE-2021-47584, CVE-2021-47590, CVE-2021-47591, CVE-2021-47593, CVE-2021-47594, CVE-2021-47597, CVE-2021-47600, CVE-2021-47603, CVE-2021-47607, CVE-2021-47608, CVE-2021-47619, CVE-2021-47631, CVE-2021-47632, CVE-2021-47640, CVE-2021-47642, CVE-2021-47644, CVE-2021-47645, CVE-2021-47654, CVE-2021-47658, CVE-2022-0001, CVE-2022-0002, CVE-2022-0171, CVE-2022-0185, CVE-2022-0264, CVE-2022-0322, CVE-2022-0330, CVE-2022-0433, CVE-2022-0492, CVE-2022-0500, CVE-2022-0516, CVE-2022-0742, CVE-2022-0995, CVE-2022-1508, CVE-2022-20008, CVE-2022-20132, CVE-2022-20369, CVE-2022-20421, CVE-2022-20422, CVE-2022-22942, CVE-2022-23036, CVE-2022-23037, CVE-2022-23038, CVE-2022-23039, CVE-2022-23040, CVE-2022-23041, CVE-2022-23042, CVE-2022-23222, CVE-2022-23960, CVE-2022-24122, CVE-2022-24407, CVE-2022-24958, CVE-2022-25265, CVE-2022-2602, CVE-2022-26490, CVE-2022-2785, CVE-2022-28478, CVE-2022-2905, CVE-2022-2928, CVE-2022-2929, CVE-2022-2938, CVE-2022-29582, CVE-2022-2961, CVE-2022-2978, CVE-2022-2991, CVE-2022-29968, CVE-2022-3078, CVE-2022-3105, CVE-2022-3106, CVE-2022-3112, CVE-2022-3176, CVE-2022-32981, CVE-2022-33744, CVE-2022-3533, CVE-2022-3543, CVE-2022-3544, CVE-2022-3606, CVE-2022-36123, CVE-2022-39842, CVE-2022-40476, CVE-2022-41409, CVE-2022-48619, CVE-2022-48631, CVE-2022-48633, CVE-2022-48634, CVE-2022-48636, CVE-2022-48638, CVE-2022-48646, CVE-2022-48648, CVE-2022-48653, CVE-2022-48655, CVE-2022-48656, CVE-2022-48657, CVE-2022-48659, CVE-2022-48675, CVE-2022-48687, CVE-2022-48688, CVE-2022-48693, CVE-2022-48697, CVE-2022-48698, CVE-2022-48699, CVE-2022-48702, CVE-2022-48713, CVE-2022-48714, CVE-2022-48720, CVE-2022-48724, CVE-2022-48726, CVE-2022-48727, CVE-2022-48728, CVE-2022-48730, CVE-2022-48731, CVE-2022-48732, CVE-2022-48740, CVE-2022-48742, CVE-2022-48744, CVE-2022-48745, CVE-2022-48746, CVE-2022-48747, CVE-2022-48749, CVE-2022-48754, CVE-2022-48755, CVE-2022-48756, CVE-2022-48757, CVE-2022-48760, CVE-2022-48766, CVE-2022-48768, CVE-2022-48770, CVE-2022-48784, CVE-2022-48785, CVE-2022-48790, CVE-2022-48791, CVE-2022-48797, CVE-2022-48798, CVE-2022-48802, CVE-2022-48809, CVE-2022-48811, CVE-2022-48813, CVE-2022-48831, CVE-2022-48835, CVE-2022-48839, CVE-2022-48845, CVE-2022-48847, CVE-2022-48850, CVE-2022-48853, CVE-2022-48855, CVE-2022-48858, CVE-2022-48863, CVE-2022-48869, CVE-2022-48880, CVE-2022-48896, CVE-2022-48904, CVE-2022-48906, CVE-2022-48910, CVE-2022-48913, CVE-2022-48922, CVE-2022-48925, CVE-2022-48931, CVE-2022-48937, CVE-2022-48941, CVE-2022-48949, CVE-2022-48953, CVE-2022-48961, CVE-2022-48979, CVE-2022-48986, CVE-2022-48998, CVE-2022-48999, CVE-2022-49001, CVE-2022-49002, CVE-2022-49004, CVE-2022-49013, CVE-2022-49016, CVE-2022-49020, CVE-2022-49021, CVE-2022-49023, CVE-2022-49025, CVE-2022-49030, CVE-2022-49052, CVE-2022-49065, CVE-2022-49067, CVE-2022-49069, CVE-2022-49074, CVE-2022-49076, CVE-2022-49077, CVE-2022-49082, CVE-2022-49084, CVE-2022-49089, CVE-2022-49092, CVE-2022-49094, CVE-2022-49095, CVE-2022-49096, CVE-2022-49113, CVE-2022-49117, CVE-2022-49119, CVE-2022-49120, CVE-2022-49135, CVE-2022-49144, CVE-2022-49148, CVE-2022-49161, CVE-2022-49164, CVE-2022-49171, CVE-2022-49172, CVE-2022-49174, CVE-2022-49176, CVE-2022-49185, CVE-2022-49193, CVE-2022-49196, CVE-2022-49201, CVE-2022-49206, CVE-2022-49209, CVE-2022-49210, CVE-2022-49211, CVE-2022-49232, CVE-2022-49234, CVE-2022-49248, CVE-2022-49260, CVE-2022-49262, CVE-2022-49278, CVE-2022-49279, CVE-2022-49289, CVE-2022-49298, CVE-2022-49301, CVE-2022-49305, CVE-2022-49309, CVE-2022-49311, CVE-2022-49312, CVE-2022-49320, CVE-2022-49324, CVE-2022-49326, CVE-2022-49331, CVE-2022-49337, CVE-2022-49341, CVE-2022-49352, CVE-2022-49370, CVE-2022-49382, CVE-2022-49386, CVE-2022-49390, CVE-2022-49402, CVE-2022-49410, CVE-2022-49414, CVE-2022-49420, CVE-2022-49421, CVE-2022-49431, CVE-2022-49435, CVE-2022-49439, CVE-2022-49441, CVE-2022-49444, CVE-2022-49445, CVE-2022-49446, CVE-2022-49447, CVE-2022-49448, CVE-2022-49453, CVE-2022-49455, CVE-2022-49457, CVE-2022-49460, CVE-2022-49467, CVE-2022-49476, CVE-2022-49482, CVE-2022-49484, CVE-2022-49488, CVE-2022-49489, CVE-2022-49490, CVE-2022-49496, CVE-2022-49497, CVE-2022-49498, CVE-2022-49501, CVE-2022-49502, CVE-2022-49514, CVE-2022-49517, CVE-2022-49526, CVE-2022-49527, CVE-2022-49530, CVE-2022-49540, CVE-2022-49546, CVE-2022-49554, CVE-2022-49560, CVE-2022-49563, CVE-2022-49564, CVE-2022-49566, CVE-2022-49568, CVE-2022-49571, CVE-2022-49597, CVE-2022-49607, CVE-2022-49617, CVE-2022-49618, CVE-2022-49640, CVE-2022-49652, CVE-2022-49656, CVE-2022-49658, CVE-2022-49662, CVE-2022-49674, CVE-2022-49677, CVE-2022-49678, CVE-2022-49679, CVE-2022-49680, CVE-2022-49681, CVE-2022-49682, CVE-2022-49693, CVE-2022-49701, CVE-2022-49703, CVE-2022-49711, CVE-2022-49719, CVE-2022-49720, CVE-2022-49725, CVE-2022-49751, CVE-2022-49767, CVE-2022-49768, CVE-2022-49771, CVE-2022-49772, CVE-2022-49779, CVE-2022-49785, CVE-2022-49789, CVE-2022-49796, CVE-2022-49797, CVE-2022-49799, CVE-2022-49800, CVE-2022-49801, CVE-2022-49802, CVE-2022-49821, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49828, CVE-2022-49829, CVE-2022-49832, CVE-2022-49835, CVE-2022-49838, CVE-2022-49851, CVE-2022-49852, CVE-2022-49858, CVE-2022-49861, CVE-2022-49865, CVE-2022-49869, CVE-2022-49870, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49888, CVE-2022-49891, CVE-2022-49892, CVE-2022-49899, CVE-2022-49901, CVE-2022-49906, CVE-2022-49907, CVE-2022-49939, CVE-2022-49948, CVE-2022-49987, CVE-2022-49997, CVE-2022-50008, CVE-2022-50011, CVE-2022-50017, CVE-2022-50025, CVE-2022-50043, CVE-2022-50061, CVE-2022-50065, CVE-2022-50071, CVE-2022-50074, CVE-2022-50077, CVE-2022-50082, CVE-2022-50094, CVE-2022-50103, CVE-2022-50104, CVE-2022-50105, CVE-2022-50106, CVE-2022-50109, CVE-2022-50114, CVE-2022-50134, CVE-2022-50144, CVE-2022-50167, CVE-2022-50171, CVE-2022-50195, CVE-2022-50197, CVE-2022-50198, CVE-2022-50199, CVE-2022-50203, CVE-2022-50204, CVE-2022-50207, CVE-2022-50210, CVE-2022-50220, CVE-2022-50222, CVE-2022-50225, CVE-2022-50230, CVE-2022-50231, CVE-2022-50232, CVE-2022-50244, CVE-2022-50248, CVE-2022-50252, CVE-2022-50253, CVE-2022-50255, CVE-2022-50259, CVE-2022-50266, CVE-2022-50278, CVE-2022-50280, CVE-2022-50281, CVE-2022-50282, CVE-2022-50296, CVE-2022-50311, CVE-2022-50315, CVE-2022-50328, CVE-2022-50334, CVE-2022-50335, CVE-2022-50337, CVE-2022-50346, CVE-2022-50355, CVE-2022-50365, CVE-2022-50380, CVE-2022-50382, CVE-2022-50395, CVE-2022-50399, CVE-2022-50407, CVE-2022-50409, CVE-2022-50420, CVE-2022-50428, CVE-2022-50432, CVE-2022-50434, CVE-2022-50435, CVE-2022-50449, CVE-2022-50461, CVE-2022-50462, CVE-2022-50463, CVE-2022-50469, CVE-2022-50480, CVE-2022-50481, CVE-2022-50490, CVE-2022-50501, CVE-2022-50509, CVE-2022-50513, CVE-2022-50518, CVE-2022-50525, CVE-2022-50537, CVE-2022-50539, CVE-2022-50552, CVE-2022-50553, CVE-2022-50559, CVE-2022-50564, CVE-2022-50644, CVE-2022-50647, CVE-2022-50669, CVE-2022-50708, CVE-2022-50719, CVE-2022-50732, CVE-2022-50741, CVE-2022-50742, CVE-2022-50749, CVE-2022-50751, CVE-2022-50754, CVE-2022-50757, CVE-2022-50758, CVE-2022-50763, CVE-2022-50786, CVE-2022-50814, CVE-2022-50836, CVE-2022-50848, CVE-2022-50860, CVE-2022-50870, CVE-2022-50872, CVE-2022-50880, CVE-2022-50887, CVE-2022-50888, CVE-2023-0045, CVE-2023-0160, CVE-2023-0468, CVE-2023-0469, CVE-2023-1872, CVE-2023-2007, CVE-2023-20588, CVE-2023-21255, CVE-2023-21400, CVE-2023-22997, CVE-2023-23000, CVE-2023-23001, CVE-2023-23003, CVE-2023-23005, CVE-2023-23006, CVE-2023-23039, CVE-2023-2860, CVE-2023-3159, CVE-2023-3220, CVE-2023-32251, CVE-2023-32253, CVE-2023-32255, CVE-2023-32256, CVE-2023-3338, CVE-2023-34256, CVE-2023-35945, CVE-2023-36632, CVE-2023-39804, CVE-2023-40791, CVE-2023-4156, CVE-2023-42755, CVE-2023-45322, CVE-2023-4611, CVE-2023-47252, CVE-2023-52435, CVE-2023-52443, CVE-2023-52447, CVE-2023-52452, CVE-2023-52454, CVE-2023-52474, CVE-2023-52481, CVE-2023-52485, CVE-2023-52491, CVE-2023-52499, CVE-2023-52504, CVE-2023-52516, CVE-2023-52523, CVE-2023-52531, CVE-2023-52561, CVE-2023-52572, CVE-2023-52576, CVE-2023-52586, CVE-2023-52587, CVE-2023-52593, CVE-2023-52607, CVE-2023-52608, CVE-2023-52612, CVE-2023-52616, CVE-2023-52629, CVE-2023-52633, CVE-2023-52645, CVE-2023-52646, CVE-2023-52669, CVE-2023-52671, CVE-2023-52675, CVE-2023-52677, CVE-2023-52691, CVE-2023-52692, CVE-2023-52739, CVE-2023-52743, CVE-2023-52747, CVE-2023-52750, CVE-2023-52752, CVE-2023-52753, CVE-2023-52761, CVE-2023-52774, CVE-2023-52789, CVE-2023-52828, CVE-2023-52841, CVE-2023-52844, CVE-2023-52882, CVE-2023-52887, CVE-2023-52888, CVE-2023-52889, CVE-2023-52898, CVE-2023-52910, CVE-2023-52920, CVE-2023-52936, CVE-2023-52978, CVE-2023-52989, CVE-2023-52995, CVE-2023-52996, CVE-2023-53000, CVE-2023-53005, CVE-2023-53007, CVE-2023-53069, CVE-2023-53075, CVE-2023-53076, CVE-2023-53080, CVE-2023-53091, CVE-2023-53092, CVE-2023-53093, CVE-2023-53099, CVE-2023-53101, CVE-2023-53123, CVE-2023-53135, CVE-2023-53137, CVE-2023-53142, CVE-2023-53143, CVE-2023-53147, CVE-2023-53153, CVE-2023-53167, CVE-2023-53174, CVE-2023-53189, CVE-2023-53191, CVE-2023-53215, CVE-2023-53234, CVE-2023-53239, CVE-2023-53255, CVE-2023-53286, CVE-2023-53289, CVE-2023-53313, CVE-2023-53324, CVE-2023-53326, CVE-2023-53332, CVE-2023-53346, CVE-2023-53347, CVE-2023-53353, CVE-2023-53357, CVE-2023-53367, CVE-2023-53368, CVE-2023-53375, CVE-2023-53404, CVE-2023-53411, CVE-2023-53419, CVE-2023-53423, CVE-2023-53425, CVE-2023-53432, CVE-2023-53438, CVE-2023-53446, CVE-2023-53449, CVE-2023-53450, CVE-2023-53460, CVE-2023-53463, CVE-2023-53469, CVE-2023-53474, CVE-2023-53480, CVE-2023-53488, CVE-2023-53498, CVE-2023-53509, CVE-2023-53529, CVE-2023-53540, CVE-2023-53542, CVE-2023-53548, CVE-2023-53560, CVE-2023-53574, CVE-2023-53589, CVE-2023-53610, CVE-2023-53650, CVE-2023-53684, CVE-2023-53694, CVE-2023-53699, CVE-2023-53712, CVE-2023-53725, CVE-2023-53728, CVE-2023-53742, CVE-2023-53745, CVE-2023-53748, CVE-2023-53757, CVE-2023-53783, CVE-2023-53785, CVE-2023-53788, CVE-2023-53794, CVE-2023-53807, CVE-2023-53815, CVE-2023-53817, CVE-2023-53818, CVE-2023-53831, CVE-2023-53836, CVE-2023-53840, CVE-2023-53841, CVE-2023-53986, CVE-2023-53991, CVE-2023-53998, CVE-2023-54001, CVE-2023-54005, CVE-2023-54013, CVE-2023-54017, CVE-2023-54039, CVE-2023-54042, CVE-2023-54045, CVE-2023-54051, CVE-2023-54081, CVE-2023-54084, CVE-2023-54086, CVE-2023-54094, CVE-2023-54099, CVE-2023-54103, CVE-2023-54104, CVE-2023-54122, CVE-2023-54128, CVE-2023-54134, CVE-2023-54150, CVE-2023-54168, CVE-2023-54171, CVE-2023-54181, CVE-2023-54190, CVE-2023-54211, CVE-2023-54218, CVE-2023-54226, CVE-2023-54232, CVE-2023-54236, CVE-2023-54241, CVE-2023-54255, CVE-2023-54279, CVE-2023-54284, CVE-2023-54304, CVE-2023-54305, CVE-2023-54311, CVE-2023-54315, CVE-2023-6200, CVE-2024-0232, CVE-2024-0564, CVE-2024-0639, CVE-2024-0775, CVE-2024-12086, CVE-2024-1312, CVE-2024-14040, CVE-2024-21803, CVE-2024-2193, CVE-2024-2312, CVE-2024-23851, CVE-2024-24856, CVE-2024-25078, CVE-2024-26606, CVE-2024-26622, CVE-2024-26654, CVE-2024-26687, CVE-2024-26688, CVE-2024-26706, CVE-2024-26736, CVE-2024-26747, CVE-2024-26751, CVE-2024-26756, CVE-2024-26763, CVE-2024-26764, CVE-2024-26769, CVE-2024-26777, CVE-2024-26795, CVE-2024-26833, CVE-2024-26839, CVE-2024-26844, CVE-2024-26856, CVE-2024-26859, CVE-2024-26879, CVE-2024-26883, CVE-2024-26884, CVE-2024-26885, CVE-2024-26891, CVE-2024-26893, CVE-2024-26896, CVE-2024-26913, CVE-2024-26914, CVE-2024-26948, CVE-2024-26957, CVE-2024-26994, CVE-2024-26999, CVE-2024-27041, CVE-2024-27044, CVE-2024-27045, CVE-2024-27047, CVE-2024-27054, CVE-2024-27388, CVE-2024-27390, CVE-2024-27432, CVE-2024-28085, CVE-2024-34459, CVE-2024-34777, CVE-2024-35799, CVE-2024-35803, CVE-2024-35806, CVE-2024-35819, CVE-2024-35871, CVE-2024-35884, CVE-2024-35922, CVE-2024-35943, CVE-2024-35945, CVE-2024-35988, CVE-2024-36008, CVE-2024-36024, CVE-2024-36897, CVE-2024-36906, CVE-2024-36908, CVE-2024-36914, CVE-2024-36916, CVE-2024-36931, CVE-2024-36937, CVE-2024-36938, CVE-2024-36947, CVE-2024-36950, CVE-2024-36953, CVE-2024-36969, CVE-2024-36975, CVE-2024-38547, CVE-2024-38552, CVE-2024-38577, CVE-2024-38588, CVE-2024-38607, CVE-2024-38613, CVE-2024-38661, CVE-2024-38667, CVE-2024-38780, CVE-2024-39277, CVE-2024-39292, CVE-2024-39301, CVE-2024-39468, CVE-2024-39480, CVE-2024-39489, CVE-2024-39494, CVE-2024-40915, CVE-2024-40953, CVE-2024-40968, CVE-2024-40973, CVE-2024-40974, CVE-2024-40980, CVE-2024-40987, CVE-2024-40990, CVE-2024-41002, CVE-2024-41004, CVE-2024-41027, CVE-2024-41046, CVE-2024-41068, CVE-2024-41069, CVE-2024-41070, CVE-2024-41072, CVE-2024-41080, CVE-2024-41087, CVE-2024-41098, CVE-2024-42063, CVE-2024-42068, CVE-2024-42076, CVE-2024-42080, CVE-2024-42097, CVE-2024-42106, CVE-2024-42118, CVE-2024-42119, CVE-2024-42120, CVE-2024-42121, CVE-2024-42122, CVE-2024-42126, CVE-2024-42145, CVE-2024-42147, CVE-2024-42148, CVE-2024-42155, CVE-2024-42156, CVE-2024-42157, CVE-2024-42158, CVE-2024-42161, CVE-2024-42230, CVE-2024-42232, CVE-2024-42236, CVE-2024-42252, CVE-2024-42267, CVE-2024-42274, CVE-2024-42281, CVE-2024-42309, CVE-2024-42310, CVE-2024-42318, CVE-2024-43819, CVE-2024-43831, CVE-2024-43832, CVE-2024-43835, CVE-2024-43890, CVE-2024-43899, CVE-2024-43901, CVE-2024-43902, CVE-2024-43904, CVE-2024-43905, CVE-2024-43907, CVE-2024-43909, CVE-2024-44948, CVE-2024-44949, CVE-2024-44954, CVE-2024-44955, CVE-2024-44969, CVE-2024-44974, CVE-2024-44982, CVE-2024-45003, CVE-2024-45006, CVE-2024-45008, CVE-2024-45015, CVE-2024-45021, CVE-2024-45025, CVE-2024-45026, CVE-2024-45778, CVE-2024-45779, CVE-2024-45780, CVE-2024-45782, CVE-2024-46702, CVE-2024-46707, CVE-2024-46714, CVE-2024-46726, CVE-2024-46727, CVE-2024-46728, CVE-2024-46729, CVE-2024-46730, CVE-2024-46731, CVE-2024-46732, CVE-2024-46737, CVE-2024-46760, CVE-2024-46765, CVE-2024-46770, CVE-2024-46772, CVE-2024-46773, CVE-2024-46774, CVE-2024-46775, CVE-2024-46776, CVE-2024-46802, CVE-2024-46804, CVE-2024-46808, CVE-2024-46809, CVE-2024-46811, CVE-2024-46812, CVE-2024-46813, CVE-2024-46814, CVE-2024-46815, CVE-2024-46816, CVE-2024-46817, CVE-2024-46818, CVE-2024-46821, CVE-2024-46832, CVE-2024-46844, CVE-2024-46848, CVE-2024-46849, CVE-2024-46852, CVE-2024-46854, CVE-2024-46857, CVE-2024-46860, CVE-2024-46870, CVE-2024-47611, CVE-2024-47658, CVE-2024-47659, CVE-2024-47661, CVE-2024-47662, CVE-2024-47666, CVE-2024-47672, CVE-2024-47673, CVE-2024-47674, CVE-2024-47683, CVE-2024-47684, CVE-2024-47693, CVE-2024-47701, CVE-2024-47704, CVE-2024-47707, CVE-2024-47720, CVE-2024-47728, CVE-2024-47730, CVE-2024-47742, CVE-2024-47749, CVE-2024-49504, CVE-2024-49858, CVE-2024-49866, CVE-2024-49890, CVE-2024-49892, CVE-2024-49893, CVE-2024-49894, CVE-2024-49895, CVE-2024-49896, CVE-2024-49897, CVE-2024-49898, CVE-2024-49899, CVE-2024-49905, CVE-2024-49906, CVE-2024-49907, CVE-2024-49908, CVE-2024-49910, CVE-2024-49911, CVE-2024-49912, CVE-2024-49913, CVE-2024-49914, CVE-2024-49915, CVE-2024-49916, CVE-2024-49917, CVE-2024-49918, CVE-2024-49919, CVE-2024-49920, CVE-2024-49921, CVE-2024-49922, CVE-2024-49923, CVE-2024-49944, CVE-2024-49955, CVE-2024-49969, CVE-2024-49970, CVE-2024-49989, CVE-2024-49996, CVE-2024-49997, CVE-2024-50001, CVE-2024-50003, CVE-2024-50007, CVE-2024-50010, CVE-2024-50016, CVE-2024-50017, CVE-2024-50036, CVE-2024-50049, CVE-2024-50063, CVE-2024-50076, CVE-2024-50083, CVE-2024-50095, CVE-2024-50098, CVE-2024-50131, CVE-2024-50135, CVE-2024-50138, CVE-2024-50146, CVE-2024-50166, CVE-2024-50167, CVE-2024-50168, CVE-2024-50180, CVE-2024-50185, CVE-2024-50194, CVE-2024-50205, CVE-2024-50258, CVE-2024-50269, CVE-2024-50289, CVE-2024-52880, CVE-2024-53061, CVE-2024-53068, CVE-2024-53079, CVE-2024-53099, CVE-2024-53114, CVE-2024-53125, CVE-2024-53128, CVE-2024-53138, CVE-2024-56737, CVE-2024-56738, CVE-2024-57977, CVE-2024-57982, CVE-2024-8805, CVE-2024-9681, CVE-2025-0167, CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686, CVE-2025-0689, CVE-2025-1118, CVE-2025-1125, CVE-2025-13837, CVE-2025-1795, CVE-2025-21732, CVE-2025-21931, CVE-2025-29481, CVE-2025-32728, CVE-2025-37980, CVE-2025-38067, CVE-2025-38088, CVE-2025-38097, CVE-2025-38166, CVE-2025-38345, CVE-2025-38346, CVE-2025-39797, CVE-2025-39866, CVE-2025-40134, CVE-2025-40257, CVE-2025-4382, CVE-2025-4878, CVE-2025-5278, CVE-2025-5351, CVE-2025-6141, CVE-2025-61661, CVE-2025-61663, CVE-2025-61664, CVE-2025-66476, CVE-2025-68183, CVE-2025-68724, CVE-2025-69720, CVE-2025-71147, CVE-2025-8114, CVE-2025-8277, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968, CVE-2026-15308, CVE-2026-1965, CVE-2026-22185, CVE-2026-23060, CVE-2026-23243, CVE-2026-28390, CVE-2026-28420, CVE-2026-29518, CVE-2026-31431, CVE-2026-31669, CVE-2026-31677, CVE-2026-31709, CVE-2026-31786, CVE-2026-31790, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-34982, CVE-2026-35177, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-3644, CVE-2026-3731, CVE-2026-3783, CVE-2026-3784, CVE-2026-40225, CVE-2026-40226, CVE-2026-40355, CVE-2026-40356, CVE-2026-4046, CVE-2026-40469, CVE-2026-41035, CVE-2026-41411, CVE-2026-41989, CVE-2026-4224, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-43158, CVE-2026-43163, CVE-2026-43279, CVE-2026-43501, CVE-2026-43503, CVE-2026-43617, CVE-2026-43618, CVE-2026-43619, CVE-2026-43620, CVE-2026-4437, CVE-2026-4438, CVE-2026-45232, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-46054, CVE-2026-46116, CVE-2026-46135, CVE-2026-46150, CVE-2026-46227, CVE-2026-46243, CVE-2026-46259, CVE-2026-46300, CVE-2026-46333, CVE-2026-46483, CVE-2026-47162, CVE-2026-47167, CVE-2026-51400, CVE-2026-51401, CVE-2026-52858, CVE-2026-52859, CVE-2026-52860, CVE-2026-53009, CVE-2026-54369, CVE-2026-54370, CVE-2026-55693, CVE-2026-55892, CVE-2026-55895, CVE-2026-57451, CVE-2026-57452, CVE-2026-57455, CVE-2026-57456, CVE-2026-58055, CVE-2026-5928, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858, CVE-2026-6019, CVE-2026-68085, CVE-2026-68180, CVE-2026-68344, CVE-2026-68434, CVE-2026-72333, CVE-2026-72369, CVE-2026-73071, CVE-2026-73074, CVE-2026-7383, CVE-2026-74578, CVE-2026-8286, CVE-2026-8927, CVE-2026-9076, CVE-2026-93053, CVE-2026-9547

The following CVEs are addressed in other dependency updates:

CVE-2008-4099, CVE-2008-4126, CVE-2020-25659, CVE-2025-69277, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-39824