Release date:
2026-07-23 15:20:43 UTC
Description:
- CVE-2026-32280: rebuild with newer golang to fix uncontrolled resource
consumption in crypto/x509 chain building, where attacker-supplied
intermediate certificates differing only in non-critical extensions bypass
the dedup check and cause excessive work past the signature-check limit
(denial of service); fix carried by golang >= 1.22.9-1.tuxcare.els9 via
upstream Go commit 7b4ed1d7 (release-branch.go1.26), CL 758320
Updated packages:
-
git-lfs-3.2.0-1.el9_2.tuxcare.els5.x86_64.rpm
sha:a47ca0a45b7fc925b002b2dded6fd745edaab0cb44b33c4df07a50c5a1739c7f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
