Release date:
2026-10-06 09:56:01 UTC
Description:
- CVE-2025-27144: count the separators before splitting compact JWS/JWE input in
the vendored go-jose/v3 so tokens with many dots no longer cause unbounded allocation
Updated packages:
-
grafana-10.2.6-15.el9_6.tuxcare.els19.aarch64.rpm
sha:21e9878fc0ee186c1563881a3b31ce9ec3ca8624e626f7efd8b4b2e024f7b287
-
grafana-10.2.6-15.el9_6.tuxcare.els19.x86_64.rpm
sha:5ba3f7ef2196dbab9511a2ea8bf6f7e2129b13a29d4b777398fb6e420a8c2bd9
-
grafana-selinux-10.2.6-15.el9_6.tuxcare.els19.aarch64.rpm
sha:1548665ced53cab8de67fad0b530a794c8e1d429e305508fbbee9afea42e7429
-
grafana-selinux-10.2.6-15.el9_6.tuxcare.els19.x86_64.rpm
sha:d821dd7ffe0237300c41932900283fe30f7920e86c728efa7782bb14c1a804a6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
