[CLSA-2026:1788858046] osbuild-composer: Fix of CVE-2026-42499
Type:
security
Severity:
Important
Release date:
2026-09-08 09:00:55 UTC
Description:
- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els13 to fix the following CVE - CVE-2026-42499: fix quadratic complexity in net/mail address parsing (consumePhrase) that could cause excessive resource consumption
CVEs fixed:
Updated packages:
  • osbuild-composer-76-2.el9_2.2.alma.tuxcare.els4.x86_64.rpm
    sha:3f3bd92d3667d1e1e748c4009ceeeb8623aac10a6cee69bac9f7ae16c499b76c
  • osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els4.x86_64.rpm
    sha:1ccf03f8b311412b9c23ca1cc15ced755cc19c3100ee1d175e69ed29508186e0
  • osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els4.x86_64.rpm
    sha:01b244a763ebf42b2536b10355d058e1cfae3ec5a8ccafda668e1b2f81910771
  • osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els4.x86_64.rpm
    sha:52871354c3f06cf4dbdfc93ddbd424f5c7bd97754d989cbd279f510fc16e29ce
  • osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els4.x86_64.rpm
    sha:b684d353725befb2723da040adb4d646cea848bfd458fd569632629d6073680b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.