High ELSA-2026-19128 1 CVE

Important: yggdrasil-worker-package-manager security update (Oracle Linux 10)

Published Jul 20, 2026 · Updated Jul 20, 2026

Ecosystem: Oracle Linux

Summary

[0.2.3-7]
- Bump release for rebuild

[0.2.3-6]
- Bump release for rebuild

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	yggdrasil-worker-package-manager	0:0.2.3-7.el10_2

Vulnerabilities 1

High 7.5

CVE-2026-25679

Incorrect parsing of IPv6 host literals in net/url

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Go standard library net/url langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go

Mar 6, 2026