Release date:
2026-09-24 16:11:14 UTC
Description:
- CVE-2026-55677: reject percent-encoded path separators (%2F, %5C) in the static
file wildcard before unescaping it, in StaticDirectoryHandler and StaticWithConfig
of the vendored github.com/labstack/echo/v4, so that an encoded separator cannot
smuggle a path segment past the router and disclose a static file protected by
route-level middleware
Updated packages:
-
osbuild-composer-132.2-3.el9_6.alma.1.tuxcare.els11.aarch64.rpm
sha:67f357c70312ba992651ae0757995100e4239da8c7fce7f276c275435d7f4763
-
osbuild-composer-132.2-3.el9_6.alma.1.tuxcare.els11.x86_64.rpm
sha:21bf84698ca47e81af10867f452da5e20e7f0b187d62acc4d51d741de57ac953
-
osbuild-composer-core-132.2-3.el9_6.alma.1.tuxcare.els11.aarch64.rpm
sha:d0c68139d7de2aa053e76391ed02ff06cdb426b6bb2c93d5d4ee6470d6f09f20
-
osbuild-composer-core-132.2-3.el9_6.alma.1.tuxcare.els11.x86_64.rpm
sha:fbaf2a12b075b248108df1b79c1a7e13b8b2ab10572d9ea684d6fae93713de0c
-
osbuild-composer-tests-132.2-3.el9_6.alma.1.tuxcare.els11.aarch64.rpm
sha:66ec30244ffeb69b6e31e0c5e2e2e1d1bd017b051d56bf8290125775c8f53f2d
-
osbuild-composer-tests-132.2-3.el9_6.alma.1.tuxcare.els11.x86_64.rpm
sha:671d0c18c0a37707a504a6112a279071bf5850e83e640bf422c504e7497e9095
-
osbuild-composer-worker-132.2-3.el9_6.alma.1.tuxcare.els11.aarch64.rpm
sha:3a7f07705db76792848e3b77184e545fd6ba5c33071baf34acae3475b7782756
-
osbuild-composer-worker-132.2-3.el9_6.alma.1.tuxcare.els11.x86_64.rpm
sha:e4f9a5aa154ce06b3ea9529d45e45e1365a67715cc7d1fa481055ab8e3e8b66f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
