Release date:
2026-10-12 11:34:06 UTC
Description:
- CVE-2026-32289: html/template - track JS template literal brace depth across
{{if}}/{{range}} branches and include it in context comparison and mangling,
so actions inside JS template literals are no longer escaped incorrectly,
which could lead to XSS
Updated packages:
-
go-toolset-1.22.9-1.el9_2.tuxcare.els29.aarch64.rpm
sha:8d587a3b063a24215b201ac5c5ab017eedc98396c787ff9b8afa57247c93972c
-
go-toolset-1.22.9-1.el9_2.tuxcare.els29.x86_64.rpm
sha:e56981a77a17d551df57a7f08c53e889411bb9929dc89b1b7993e3787995686a
-
golang-1.22.9-1.el9_2.tuxcare.els29.aarch64.rpm
sha:115cdd3beb1917b0967beb65598796ff5be7da38ff3e2f1a137f9ebb35095406
-
golang-1.22.9-1.el9_2.tuxcare.els29.x86_64.rpm
sha:c3e9cd6ad5c940058e9cdaa82014f43ca9ba546c76ba036dfb3afd49987e08c5
-
golang-bin-1.22.9-1.el9_2.tuxcare.els29.aarch64.rpm
sha:1cad2412aaf6e784440ad4711c71ec895839dcbbc0aaae1a4823799c58ce5cd5
-
golang-bin-1.22.9-1.el9_2.tuxcare.els29.x86_64.rpm
sha:89541dd05387db6711b3b4d3d1b9a15d87942baff75fa4189af34a726dac1c4f
-
golang-docs-1.22.9-1.el9_2.tuxcare.els29.noarch.rpm
sha:b2872c9b0d3d2416d0a20d5dc693f6026192e4b1737f7135454293739e4534e4
-
golang-misc-1.22.9-1.el9_2.tuxcare.els29.noarch.rpm
sha:8b83e7ebd9e8b49d3a60d508f4ad269de23589428d9b5762a79b903a3d68f1b7
-
golang-src-1.22.9-1.el9_2.tuxcare.els29.noarch.rpm
sha:aad67df7f113a262e22cfba9d0cb4c5ebff4fc130a8674eca24705da6fb19f89
-
golang-tests-1.22.9-1.el9_2.tuxcare.els29.noarch.rpm
sha:e2820bc2356f0b08c76301d8f468c7db82198425a741de40ba6cb48663e86cfb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
