[ALSA-2026:69308] Important: yggdrasil security update
Type:
security
Severity:
important
Release date:
2026-09-22
Description:
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 yggdrasil-devel-0.4.9.2-1.el10_2.3.aarch64.rpm 284d3c51812457bc6dab3e3ec9a9b42477108e4e9c7ce4daae528ede79c2d678
aarch64 yggdrasil-0.4.9.2-1.el10_2.3.aarch64.rpm 4416f312e5238d7842c34fab7e5a6af67d43c5bdbd1ca584687b3fa95154081b
ppc64le yggdrasil-0.4.9.2-1.el10_2.3.ppc64le.rpm 4bd1f89dcc5bc9cde01b425de0d3ee4312f5e704c7b8d833fe0ea389e2cacc9c
ppc64le yggdrasil-devel-0.4.9.2-1.el10_2.3.ppc64le.rpm a0d03422fe46bc5526f073617130cd50e350a7cbd872f4a27d2d4043d29dd7ae
s390x yggdrasil-devel-0.4.9.2-1.el10_2.3.s390x.rpm 513a47ec6453a3553302b2fbfd62eab4df432c9fa3ddbcb9b5ce97b571ed82fd
s390x yggdrasil-0.4.9.2-1.el10_2.3.s390x.rpm c04285e1d67a2703b0bd77dfecd190e7c39f3ad963a52446a98b058152152b02
x86_64 yggdrasil-devel-0.4.9.2-1.el10_2.3.x86_64.rpm 6efa64248956c4e2c799bbe529b72172e2e3a47d199204729460d2a37e34fca6
x86_64 yggdrasil-0.4.9.2-1.el10_2.3.x86_64.rpm dee0f5b0b234c9cb8b37dd30572e2b581df80f45f1c30924a7ddee4e038c5812
x86_64_v2 yggdrasil-0.4.9.2-1.el10_2.3.x86_64_v2.rpm 6eacf972bb046f9f9a191b2facde527e94777362239a757cd53da28af5b26a7b
x86_64_v2 yggdrasil-devel-0.4.9.2-1.el10_2.3.x86_64_v2.rpm 6eb5bb95773264d15c88780491f22423dd26e6ea9143fcfeb015a16a0eb67c0b
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.