[CLSA-2026:1790163949] grafana-pcp: Fix of CVE-2026-42504
Type:
security
Severity:
Important
Release date:
2026-09-23 11:46:00 UTC
Description:
- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els28 to fix the following Go standard-library CVE tracked for this package - CVE-2026-42504: fix mime quadratic complexity in DecodeHeader, which skipped only the leading "=?" of an undecodable encoded-word and so burned CPU on a header carrying many invalid ones
CVEs fixed:
Updated packages:
  • grafana-pcp-5.1.1-1.el9_2.tuxcare.els6.x86_64.rpm
    sha:7e54ce47af57f5b23b6a46a04e5886e3aadb707455f04fd7f682c4f7f354f6d2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.