Release date:
2026-09-22 12:42:16 UTC
Description:
- CVE-2026-42504: rebuild against golang >= 1.22.9-1.el9_2.tuxcare.els28 to avoid
quadratic complexity in mime WordDecoder.DecodeHeader, preventing CPU exhaustion
when decoding a header that contains many invalid encoded-words
Updated packages:
-
osbuild-composer-76-2.el9_2.2.alma.tuxcare.els11.x86_64.rpm
sha:79ee1b7c4cc87339e5e4355bc1a43b03820d82c5151a1ef7b60ac853fa7326cf
-
osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els11.x86_64.rpm
sha:7e9506c7658e74aa400b268f100e4277167a161c4894add4c744cfc7ea466297
-
osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els11.x86_64.rpm
sha:e1b75f9a77b7a688556e58ea6f0e1640b49f8d35629fa337b339836099e8a857
-
osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els11.x86_64.rpm
sha:1d7e351c626a747b7f79a94b0ab047cda7d348ab5ecbdc07db36186aa370db8b
-
osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els11.x86_64.rpm
sha:e3cebce262f6cd04fa45aee12bda139911cdb9327e08c87744f5765185a9703d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
