CLSA-2026-1784820017
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1784820017.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1784820017
- Upstream
- Published
- 2026-08-03T12:09:35Z
- Modified
- 2026-10-26T09:30:27Z
- Summary
- git-lfs: Fix of 2 CVEs
- Details
-
- CVE-2026-32280: rebuild with newer golang to fix uncontrolled resource consumption in crypto/x509 chain building, where attacker-supplied intermediate certificates differing only in non-critical extensions bypass the dedup check and cause excessive work past the signature-check limit (denial of service); fix carried by golang >= 1.22.9-1.tuxcare.els9 via upstream Go commit 7b4ed1d7 (release-branch.go1.26), CL 758320
- References