Release yggdrasil-0.4.9-5.el10_2 ALSA-2026:24716
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 35/100
Research direction
Start by reviewing the three listed CVEs and the affected yggdrasil-0.4.9-5.el10_2 packages across the named architectures. The issue does not identify source files, tests, or an entry point; done would mean confirming that the security-fixed packages are available for the listed targets.
Written by the indexing model from the issue text.
Description
yggdrasil security update
Severity: Important
Description
yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker.
Security Fix(es):
- crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
- golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
- crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
yggdrasil-0.4.9-5.el10_2.x86_64
yggdrasil-0.4.9-5.el10_2.s390x
yggdrasil-0.4.9-5.el10_2.ppc64le
yggdrasil-0.4.9-5.el10_2.aarch64
yggdrasil-devel-0.4.9-5.el10_2.x86_64
yggdrasil-devel-0.4.9-5.el10_2.ppc64le
yggdrasil-devel-0.4.9-5.el10_2.aarch64
yggdrasil-devel-0.4.9-5.el10_2.s390x
yggdrasil-0.4.9-5.el10_2.x86_64_v2
yggdrasil-devel-0.4.9-5.el10_2.x86_64_v2
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 1/5 Under an hour Newbie friendliness 20/100
All issues in AlmaLinux/updates
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
modelcontextprotocol/python-sdk#3648 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 70/100
EclipseFdn/open-vsx.org#13831 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
open-policy-agent/gatekeeper-library#799 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
weaviate/weaviate-go-client#485 ·
Maintainers usually reply within 2 days
-
agent/sec-check hive/hosted-available-lke648397-260827-5n31 security
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Maintainers usually reply within 1 day