Release date:
2026-09-24 11:23:13 UTC
Description:
- CVE-2026-14199: length-prefix each field of the Auth Proxy identity cache key so a username and forwarded attributes can no longer concatenate into a colliding key and authenticate one user as another
Updated packages:
-
grafana-10.2.6-15.el9_6.tuxcare.els18.aarch64.rpm
sha:2038b7e73843e3d081564fe2386935a4b10d0ef6f23a7f1ba42d53efe70c84a3
-
grafana-10.2.6-15.el9_6.tuxcare.els18.x86_64.rpm
sha:2da6523c4f6512a5bc96e2abbdb97d0220838adf90bacc40310cac1f51209e37
-
grafana-selinux-10.2.6-15.el9_6.tuxcare.els18.aarch64.rpm
sha:60b73217639d811f7f52ff975df0d2281b82f5908f4f37d3cd1f3891fd070932
-
grafana-selinux-10.2.6-15.el9_6.tuxcare.els18.x86_64.rpm
sha:1d7b28eab0dba0edb70b7c601fa4ece0fca4a46c4f24cd91a9582852591f986b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
