Release date:
2026-10-06 10:21:21 UTC
Description:
- CVE-2025-27144: count the separators before splitting compact JWS/JWE input in
the vendored go-jose/v3 so tokens with many dots no longer cause unbounded allocation
Updated packages:
-
grafana-10.2.6-23.el9_8.3.tuxcare.els2.aarch64.rpm
sha:6ad8025d386b19c4d55ffffa579451f6003122fc1dd82e2ff4afe8296965858f
-
grafana-10.2.6-23.el9_8.3.tuxcare.els2.x86_64.rpm
sha:f99b436d881935eda6919af2b9cab3bf35f610fd7804770a0c151a1c3375aca0
-
grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els2.aarch64.rpm
sha:41356f6ab5159207acc2dec3d5cea4daaaa2c87d3ba967051b46cc86ed998f3b
-
grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els2.x86_64.rpm
sha:b0415d98c0caf007a2c3d8a5941ae89b56907c8f8d59990b0e8c093bf7a6c40f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
