Release date:
2026-10-09 08:36:10 UTC
Description:
- CVE-2026-33186: reject malformed gRPC :path values that omit the leading
slash in Server.handleStream, so non-canonical paths can no longer reach
path-based authorization interceptors (vendored google.golang.org/grpc)
Updated packages:
-
ignition-2.21.0-1.el9_6.tuxcare.els3.aarch64.rpm
sha:8a423ea33ff80e648f1bf759f6a44c393aedeb438c777fefe85a8eda5e2073e3
-
ignition-2.21.0-1.el9_6.tuxcare.els3.x86_64.rpm
sha:31bb069b989c117f192ba349c274a287f2c670107bf259198e53f89c898cc632
-
ignition-edge-2.21.0-1.el9_6.tuxcare.els3.aarch64.rpm
sha:ae672f9429270f9d52c7488cea8e2d330665213fe90b508d1f003c29406a6dc2
-
ignition-edge-2.21.0-1.el9_6.tuxcare.els3.x86_64.rpm
sha:915f403d19216dfeb40b31d467471d8e98c765f4e44f693e1e5de0809e271689
-
ignition-grub-2.21.0-1.el9_6.tuxcare.els3.aarch64.rpm
sha:02db7c3f5c333558a15c0f25fb749f57902b7d9f5e7df8c02bc18a636c151092
-
ignition-grub-2.21.0-1.el9_6.tuxcare.els3.x86_64.rpm
sha:54e4d7e915a7bbfd3f0f990c7453a6a9772a3a84d00a05ca20777b2dcb656d64
-
ignition-validate-2.21.0-1.el9_6.tuxcare.els3.aarch64.rpm
sha:2dc37df46acbea9fda5c0a61e05f36fad71630b670e733338801d5f85a4dc936
-
ignition-validate-2.21.0-1.el9_6.tuxcare.els3.x86_64.rpm
sha:3cc5331c98a6d62c60939194b60552b25d043f62f1f90a0cc03c6e3abeb25b29
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
