Release date:
2026-10-15 10:09:28 UTC
Description:
- CVE-2026-4800: validate the `imports` key names in the bundled lodash 4.17.21
`_.template` and merge `imports` with own properties only, so a polluted
Object.prototype key can no longer be spliced into the compiled template's
Function() parameter list
Updated packages:
-
grafana-10.2.6-23.el9_8.3.tuxcare.els6.aarch64.rpm
sha:6250e56052a46fb0464d2c0efc05485aaea6fb87f5453a20681fa00442e7cf35
-
grafana-10.2.6-23.el9_8.3.tuxcare.els6.x86_64.rpm
sha:62ef47c229d9806b690e670c4eb7497c00516fcab7c2c1735547003af711fb60
-
grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els6.aarch64.rpm
sha:49fa5632cf8ec2765a8f97f26359c0ec4ec38f3b77860b64d0f7df025086d4b9
-
grafana-selinux-10.2.6-23.el9_8.3.tuxcare.els6.x86_64.rpm
sha:5eaad598a843626201947eac1ac5a23a2cdd0bf9a3f701822de3bfce3079507e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
