Release cockpit-image-builder-94.3-1.el10_2 ALSA-2026:24331
- Ngôn ngữ chính
- Không có dữ liệu ngôn ngữ
- Star
- 2
- Fork
- 0
- Chỉ số merge pull request
- Không có pull request nào được merge trong 30 ngày
Mô tả
cockpit-image-builder security update
Severity: Important
Description
The image-builder-frontend generates custom images suitable for deploying systems or uploading to the cloud. It integrates into Cockpit as a frontend for osbuild.
Security Fix(es):
* lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)
* lodash: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
cockpit-image-builder-94.3-1.el10_2.noarch
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.