[CLSA-2026:1790065054] grafana-pcp: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-20 19:25:28 UTC
Description:
- rebuild with newer golang version 1.25.7-1.el9_6.tuxcare.els18 to fix the following CVE's - CVE-2026-42504: avoid quadratic complexity in mime (*WordDecoder).DecodeHeader by skipping over the whole undecodable encoded-word instead of only its leading "=?", preventing CPU exhaustion from a header carrying many invalid encoded-words
Updated packages:
  • grafana-pcp-5.1.1-11.el9_6.tuxcare.els7.aarch64.rpm
    sha:facc1936acd996fbf75aff7a8ce507303a1280c711a9724c4fd66b33b309b91a
  • grafana-pcp-5.1.1-11.el9_6.tuxcare.els7.x86_64.rpm
    sha:0a8c2c1c2c5e8d7c58f18cb5244aaabe6b56825fca778f410658620cc0408a21
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.