Release date:
2026-10-06 21:02:03 UTC
Description:
- CVE-2026-42502: treat foster-parented raw-text elements in foreign content as
escaped rather than literal in the vendored golang.org/x/net/html renderer,
preventing a cross-site scripting bypass when a parsed tree is re-rendered
Updated packages:
-
osbuild-composer-76-2.el9_2.2.alma.tuxcare.els13.aarch64.rpm
sha:bec46cdf8c450f614c03ce2bea2d123fbb07baf2e3df96fb4b7651f5e8ea7385
-
osbuild-composer-76-2.el9_2.2.alma.tuxcare.els13.x86_64.rpm
sha:0e36aa7cffe0d0e4b9f68776014f87f7a2ef529df132f769d5daaf5232d8ec3e
-
osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els13.aarch64.rpm
sha:38cab92c888a3ab3b5be4f30c3b06fa59a5109287c80b80ee3a1e28e9ea1e4dd
-
osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els13.x86_64.rpm
sha:bf6ed01fd1795ba7fdd3a204b15683f16a32da62bf4a71ed859d5c00ba01650c
-
osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els13.aarch64.rpm
sha:247a45115249680a1b3eda24e9a8e8ed1d9aae6acce0ffabbe34eed670d9f0a2
-
osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els13.x86_64.rpm
sha:12b388297406d15aea6fbd1edc3cbfcfe93687d46872459c732fe6e8c712c186
-
osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els13.aarch64.rpm
sha:d74ef3de8861b91c0a8c0b49f405c6b68f60a9ccd395aa405043a6de9d189fa4
-
osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els13.x86_64.rpm
sha:048e4ced0e024ac276e9852cd83f6da2736e8d7d5a06a70db5d1327da2e08a7c
-
osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els13.aarch64.rpm
sha:606daf5ff7345619a702c4b0f66a4f85475fd2706d340fd966218a4760067dea
-
osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els13.x86_64.rpm
sha:7c2daeb2c42f298926ba3b9eb1867cd133d1589f2eb29b20b83e974055ed138c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
