Release date:
2026-10-12 15:19:44 UTC
Description:
- CVE-2026-32289: track JS template literal brace depth across branches and
ranges in html/template, and include it in context comparison and mangling,
so actions inside JS template literals are no longer escaped incorrectly,
which could lead to XSS
Updated packages:
-
go-toolset-1.25.7-1.el9_6.tuxcare.els20.aarch64.rpm
sha:27d59e1cf61522aa190075977f40730051fb54e3035cbbe852ec3c714715adaa
-
go-toolset-1.25.7-1.el9_6.tuxcare.els20.x86_64.rpm
sha:007399feb6f869df8877a27431db8d3dc0297bccbb4f5a2f200a072617d9a34e
-
golang-1.25.7-1.el9_6.tuxcare.els20.aarch64.rpm
sha:54c51326ceaca75a5cab39770d73c9375604ea459698273504c154e95c8306e4
-
golang-1.25.7-1.el9_6.tuxcare.els20.x86_64.rpm
sha:c3cefbcf83db3bbce13e5cb0ee0aeed62b7fb074a7a460feb8cb0a0648c02658
-
golang-bin-1.25.7-1.el9_6.tuxcare.els20.aarch64.rpm
sha:cb0050b4e0a6508797584e29d415605216c937a26209f0afc4e293375f4af58c
-
golang-bin-1.25.7-1.el9_6.tuxcare.els20.x86_64.rpm
sha:08c04864e5544a475b080b6281216783f34492329ae75e2abc695570d96dc8fa
-
golang-docs-1.25.7-1.el9_6.tuxcare.els20.noarch.rpm
sha:7cd502ed508ed37b5bb87ddcdab10bc078d3c054cd7b0b405402c98db2e1130b
-
golang-misc-1.25.7-1.el9_6.tuxcare.els20.noarch.rpm
sha:237b3597ce0a585175f1f0e5708e9b47af53b7f164b33e88dd009ed862a97035
-
golang-race-1.25.7-1.el9_6.tuxcare.els20.aarch64.rpm
sha:b687ef3605f24462b52fa349f8c1f127536ecf0b332a7c3e26d86b08a7587a7a
-
golang-race-1.25.7-1.el9_6.tuxcare.els20.x86_64.rpm
sha:fe1c8e21f934d8714a03356c02f948a1694b22acdac44cf3e742d4f033bfecab
-
golang-src-1.25.7-1.el9_6.tuxcare.els20.noarch.rpm
sha:bc616bac815ef93521cb88a91fcc0ea453bc46ea1e4ee8b578fb3ec0cbf0a940
-
golang-tests-1.25.7-1.el9_6.tuxcare.els20.noarch.rpm
sha:5c47dbc0a44a6c851720dca0d5b1ba1960b2570b283eb5aa4b2f87eba22b4f4b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
