Release date:
2026-09-10 11:53:59 UTC
Description:
- CVE-2026-39820: rebuild against golang >= 1.22.9-1.el9_2.tuxcare.els13 to fix quadratic
complexity in consumeComment in net/mail, preventing CPU exhaustion and excessive memory
allocation from well-crafted input to ParseAddress, ParseAddressList and ParseDate
Updated packages:
-
osbuild-composer-76-2.el9_2.2.alma.tuxcare.els5.x86_64.rpm
sha:69a62b211d1b9be8ef54334c9e9f52c3ef601f63eb32c55c1f1dba3ee28d52ce
-
osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els5.x86_64.rpm
sha:4748b8b83dca2fa6f01a90bf68891800cb9a6c94b20dcad08a028d8ec907c157
-
osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els5.x86_64.rpm
sha:78323a7dce4c71a5e7884f406403717c929f260e994a8a86c5ffc8022f384d90
-
osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els5.x86_64.rpm
sha:7206170c93c46a139b7c6b913df397c0d53404341cafa90771f2b9f9d1feec36
-
osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els5.x86_64.rpm
sha:96f8be95799c41edf5cd0784291e9eb0bbe6eaab1fd0b062376c6c216b8e316e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
