Release date:
2026-10-23 07:59:03 UTC
Description:
- CVE-2026-39821: reject xn-- labels that decode to all-ASCII in the vendored
golang.org/x/net/idna package; the check shipped in x/net v0.56.0 is
compiled out when built with Go 1.26
- require golang >= 1.26.6: the Go standard library fixes come from the build
toolchain, an older golang would silently reopen them
Updated packages:
-
osbuild-composer-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm
sha:f7bcaa74ae901a04327ae35d65a303fe4166650a196ab07c4b1e60e2dff7b38d
-
osbuild-composer-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm
sha:4f1c335df21270d134c503841d25de5fada5f5ee0380bc8a08a2dcf09006b07e
-
osbuild-composer-core-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm
sha:8e36af748211b211d70777afa1a8d0da6aa57f5df69008b1e0e6ef0c4b7d8cfc
-
osbuild-composer-core-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm
sha:3d6a5672322f20d4cf40ac0f275797c4f500847f04aae19bc0295e6181e9207a
-
osbuild-composer-tests-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm
sha:46db2164955b288de1f7944d1ee93f1be0713bd58f05d36ba5459f80a9580a74
-
osbuild-composer-tests-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm
sha:c918b975a878e71b7d5f77e4901a94d3b5b811ed988e6e5db08ca539339d2c80
-
osbuild-composer-worker-165.1-5.el9_8.alma.1.tuxcare.els1.aarch64.rpm
sha:b9548b991be3d528260bec2c30f71bf4664db573b3e9b10d865abf4673a0501b
-
osbuild-composer-worker-165.1-5.el9_8.alma.1.tuxcare.els1.x86_64.rpm
sha:e629e3e9ec7640c73d65f3c05d9bfd0e5898c13de02f61126d9340710d395633
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
