Release date:
2026-09-23 09:34:01 UTC
Description:
- CVE-2026-42504: rebuild against golang >= 1.25.7-1.el9_6.tuxcare.els18 to avoid
quadratic complexity in mime WordDecoder.DecodeHeader, preventing CPU exhaustion
when decoding a header that contains many invalid encoded-words
Updated packages:
-
osbuild-composer-132.2-3.el9_6.alma.1.tuxcare.els10.x86_64.rpm
sha:e695aa83f19a08c67a2c932edeb51b11ba5f50466717b793d6594eea43ae2233
-
osbuild-composer-core-132.2-3.el9_6.alma.1.tuxcare.els10.x86_64.rpm
sha:2422208e597c43608941436d540bcf7266fd208998c7ca3804d43ca3b42b6daf
-
osbuild-composer-tests-132.2-3.el9_6.alma.1.tuxcare.els10.x86_64.rpm
sha:79a260d2a2ff8f054228da36a2aa4d6367d6075a541b59a2ee697928c74aadcb
-
osbuild-composer-worker-132.2-3.el9_6.alma.1.tuxcare.els10.x86_64.rpm
sha:e763194a2935ddf54f4494d739aa57607e504e8bcdb2612b066031639039f9fe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
