Release date:
2026-10-06 18:19:18 UTC
Description:
- CVE-2026-42504: avoid quadratic complexity in mime WordDecoder.DecodeHeader by
skipping over the entire undecodable encoded-word instead of only the initial
"=?", preventing CPU exhaustion when decoding a header that contains many
invalid encoded-words
Updated packages:
-
go-toolset-1.25.7-1.el9_6.tuxcare.els18.aarch64.rpm
sha:1bd4e3a616dd84d8754844675ac19beee8de18e89d1944b750fc7e48cfec49b8
-
go-toolset-1.25.7-1.el9_6.tuxcare.els18.x86_64.rpm
sha:b240ad09c6bced6302bdff17cdc626f46c8039f48844db79a1b3d391365c6758
-
golang-1.25.7-1.el9_6.tuxcare.els18.aarch64.rpm
sha:ad2c333c1d1b0c8ffb45951ef46fa8d0027d7a39bd14640009c1d664adfe848c
-
golang-1.25.7-1.el9_6.tuxcare.els18.x86_64.rpm
sha:597e387477d8ca698f455a261c04e2cc11146dc36540694b2b1508fbb7c4e89f
-
golang-bin-1.25.7-1.el9_6.tuxcare.els18.aarch64.rpm
sha:fb94e99de0a146264508acbcdb84b3e4136d3f606a9e7ac64d8fba6d0ff65b65
-
golang-bin-1.25.7-1.el9_6.tuxcare.els18.x86_64.rpm
sha:cb10299d04a763d558c1bb14c264c9583c301648626f78f2b8322f624ee35df0
-
golang-docs-1.25.7-1.el9_6.tuxcare.els18.noarch.rpm
sha:4d9e3daa65f26f6855ae0a2e0e781b7b6ac5fa3ea1b7ec0cbbcc9fb1c996dde9
-
golang-misc-1.25.7-1.el9_6.tuxcare.els18.noarch.rpm
sha:e1c411a6e3a479cb661124c1e834089f011cfc580ebc0c527e8ff1250baa3c48
-
golang-race-1.25.7-1.el9_6.tuxcare.els18.aarch64.rpm
sha:1d2a85aa75888da00237f2ae5dcfc3e3c2bceeaf0b6577592686cd15c36f0c78
-
golang-race-1.25.7-1.el9_6.tuxcare.els18.x86_64.rpm
sha:3f209d92963435ed1ce14466e03267308ac3d87a5a044d012b723eed4b33e329
-
golang-src-1.25.7-1.el9_6.tuxcare.els18.noarch.rpm
sha:325b65ba4b0bb62d1708bf1d2994c6d93017fe65229423b36677e64f8983377a
-
golang-tests-1.25.7-1.el9_6.tuxcare.els18.noarch.rpm
sha:bc0359b036613fdac31ef7a8375b76d8a0cbaffd3997d8d479b0db253fad6c55
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
