Release date:
2026-09-15 14:48:43 UTC
Description:
- CVE-2026-27136: ignore duplicate attributes during tokenization in the
vendored golang.org/x/net/html, so that the parsed attribute list matches what
Render emits, preventing an HTML sanitizer bypass
Updated packages:
-
osbuild-composer-132.2-3.el9_6.alma.1.tuxcare.els7.x86_64.rpm
sha:fae47968625d70d3093b57f9f5303481ca222dd2d927433c1e1847b3d98a1305
-
osbuild-composer-core-132.2-3.el9_6.alma.1.tuxcare.els7.x86_64.rpm
sha:e16f126ac2bee35f09bbb697f2bca2b0c2c1db9075b9b5c0ad2ff6cda5f882a3
-
osbuild-composer-tests-132.2-3.el9_6.alma.1.tuxcare.els7.x86_64.rpm
sha:fc5434d74c371159c4834358a05e1ec55b255760507d581510ab17364815cc61
-
osbuild-composer-worker-132.2-3.el9_6.alma.1.tuxcare.els7.x86_64.rpm
sha:9f5510013e427e1eac7c49b1240da4560f54649e9ef2461916bd37b900c245a2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
