[ALSA-2026:91138] Important: yggdrasil security update
Type:
security
Severity:
important
Release date:
2026-10-29
Description:
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): * net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing (CVE-2026-94440) * net/[http:](http:) net/http/internal/http2: golang.org/x/net/http2: net/[http:](http:) Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 yggdrasil-devel-0.4.9.2-1.el10_2.4.aarch64.rpm 0fef9f9402a9db1d28cf35c16ca23d4b4092c60dcc37f3d0b0e55ab9d4da50db
aarch64 yggdrasil-0.4.9.2-1.el10_2.4.aarch64.rpm 5593286c06c1e9aa29e8cc857f9b2c9480b434bd5d66c6afc511d0a3a69c1631
ppc64le yggdrasil-devel-0.4.9.2-1.el10_2.4.ppc64le.rpm 51ffbd7b626a8852fec68d61cc55cab948afab2a4b57f754d6fca9ecc788aee4
ppc64le yggdrasil-0.4.9.2-1.el10_2.4.ppc64le.rpm cbbb7d39f2934d6b465dfb2eb349babff2c79779e47c78f60bd6695e0fc9cc5f
s390x yggdrasil-0.4.9.2-1.el10_2.4.s390x.rpm 28a9415c2de3e83149ca8114d06aa480e830f2196432f55787a3a9c07c58643e
s390x yggdrasil-devel-0.4.9.2-1.el10_2.4.s390x.rpm 743ccfa36038ec8a9d2f14cb22da28cdc1b8689421f3a03bd2a177a8fe4da855
x86_64 yggdrasil-0.4.9.2-1.el10_2.4.x86_64.rpm 2a2d6a45827fdaf97a36c02d36ee0da2ac735140b927b0ce14aea8f6c7457bdc
x86_64 yggdrasil-devel-0.4.9.2-1.el10_2.4.x86_64.rpm c159e3dfe45c8da47d4a5957da9693ff7a081f4275748e447aab6b33eb62a837
x86_64_v2 yggdrasil-devel-0.4.9.2-1.el10_2.4.x86_64_v2.rpm 2774fad12fffae693f365bcd78937326fa52caf78f2361c53020696c12c6cf10
x86_64_v2 yggdrasil-0.4.9.2-1.el10_2.4.x86_64_v2.rpm 443f7f265e2594d5e922def3bfc7a2f5afcfc31aeea3370ecb4765f5549baafc
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.