# CVE-2025-4673: Sensitive headers not cleared on cross-origin redirect in net/http

CVE-2025-4673 is fixed in 52 products on 1 platform, first by SUSE-SU-2025:01846-1, released June 9, 2025. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2025-4673
- Priority: Routine
- CVSS: 6.8 (Moderate)
- EPSS: 0.0067
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 9, 2025
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-4673

## Description

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.  Security Fix(es):  * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)  * golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)  * crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)  * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | amazon-cloudwatch-agent amzn 2023 | 1.300055.3-1.amzn2023 | [ALAS2023-2025-1029](https://patchblox.com/security/data/fix/linux/alas2023-2025-1029.md) | Jun 18, 2025 |
| Linux | amazon-ecr-credential-helper amzn 2023 | 0.10.1-2.amzn2023 | [ALAS2023-2025-1214](https://patchblox.com/security/data/fix/linux/alas2023-2025-1214.md) | Oct 14, 2025 |
| Linux | amazon-ssm-agent amzn 2023 | 3.3.3572.0-1.amzn2023 | [ALAS2023-2025-1359](https://patchblox.com/security/data/fix/linux/alas2023-2025-1359.md) | Jan 7, 2026 |
| Linux | captree amzn 2023 | 2.73-1.amzn2023.0.3 | [ALAS2023-2025-1141](https://patchblox.com/security/data/fix/linux/alas2023-2025-1141.md) | Aug 5, 2025 |
| Linux | captree-debuginfo amzn 2023 | 2.73-1.amzn2023.0.3 | [ALAS2023-2025-1141](https://patchblox.com/security/data/fix/linux/alas2023-2025-1141.md) | Aug 5, 2025 |
| Linux | cni-plugins amzn 2023 | 1.7.1-1.amzn2023.0.2 | [ALAS2023-2025-1143](https://patchblox.com/security/data/fix/linux/alas2023-2025-1143.md) | Aug 6, 2025 |
| Linux | cni-plugins-debuginfo amzn 2023 | 1.7.1-1.amzn2023.0.2 | [ALAS2023-2025-1143](https://patchblox.com/security/data/fix/linux/alas2023-2025-1143.md) | Aug 6, 2025 |
| Linux | cni-plugins-debugsource amzn 2023 | 1.7.1-1.amzn2023.0.2 | [ALAS2023-2025-1143](https://patchblox.com/security/data/fix/linux/alas2023-2025-1143.md) | Aug 6, 2025 |
| Linux | containerd amzn 2023 | 2.0.5-1.amzn2023.0.2 | [ALAS2023-2025-1077](https://patchblox.com/security/data/fix/linux/alas2023-2025-1077.md) | Jul 3, 2025 |
| Linux | containerd-debuginfo amzn 2023 | 2.0.5-1.amzn2023.0.2 | [ALAS2023-2025-1077](https://patchblox.com/security/data/fix/linux/alas2023-2025-1077.md) | Jul 3, 2025 |
| Linux | containerd-debugsource amzn 2023 | 2.0.5-1.amzn2023.0.2 | [ALAS2023-2025-1077](https://patchblox.com/security/data/fix/linux/alas2023-2025-1077.md) | Jul 3, 2025 |
| Linux | containerd-stress amzn 2023 | 2.0.5-1.amzn2023.0.2 | [ALAS2023-2025-1077](https://patchblox.com/security/data/fix/linux/alas2023-2025-1077.md) | Jul 3, 2025 |
| Linux | containerd-stress-debuginfo amzn 2023 | 2.0.5-1.amzn2023.0.2 | [ALAS2023-2025-1077](https://patchblox.com/security/data/fix/linux/alas2023-2025-1077.md) | Jul 3, 2025 |
| Linux | delve RHEL 8 | 0:1.24.1-1.module+el8.10.0+22945+b2c96a17 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | delve almalinux 8 | 1.24.1-1.module_el8.10.0+3977+66935a26 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | delve ol 8 | 0:1.24.1-1.0.1.module+el8.10.0+90602+3daf471e | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | delve rocky 8 | 0:1.24.1-1.module+el8.10.0+1951+c74bd827 | [RLSA-2025:10672](https://patchblox.com/security/data/fix/linux/rlsa-2025-10672.md) | Jul 29, 2025 |
| Linux | docker amzn 2023 | 25.0.8-1.amzn2023.0.5 | [ALAS2023-2025-1074](https://patchblox.com/security/data/fix/linux/alas2023-2025-1074.md) | Jul 3, 2025 |
| Linux | docker-debuginfo amzn 2023 | 25.0.8-1.amzn2023.0.5 | [ALAS2023-2025-1074](https://patchblox.com/security/data/fix/linux/alas2023-2025-1074.md) | Jul 3, 2025 |
| Linux | docker-debugsource amzn 2023 | 25.0.8-1.amzn2023.0.5 | [ALAS2023-2025-1074](https://patchblox.com/security/data/fix/linux/alas2023-2025-1074.md) | Jul 3, 2025 |
| Linux | ecs-init amzn 2023 | 1.96.0-1.amzn2023 | [ALAS2023-2025-1109](https://patchblox.com/security/data/fix/linux/alas2023-2025-1109.md) | Jul 21, 2025 |
| Linux | git-lfs RHEL 9 | 0:3.7.1-4.el9_8 | [RHSA-2026:19350](https://patchblox.com/security/data/fix/linux/rhsa-2026-19350.md) | May 15, 2026 |
| Linux | git-lfs almalinux 9 | 3.7.1-4.el9_8 | [ALSA-2026:19350](https://patchblox.com/security/data/fix/linux/alsa-2026-19350.md) | May 19, 2026 |
| Linux | go-toolset RHEL 8 | 0:1.24.4-1.module+el8.10.0+23323+67916f33 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | go-toolset RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | go-toolset almalinux 8 | 1.24.4-1.module_el8.10.0+4027+41c6fed2 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | go-toolset almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | go-toolset ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | go-toolset ol 8 | 0:1.24.4-1.module+el8.10.0+90631+36e43025 | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | go-toolset ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | go-toolset rocky 8 | 0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e | [RLSA-2025:10672](https://patchblox.com/security/data/fix/linux/rlsa-2025-10672.md) | Jul 29, 2025 |
| Linux | go1.23 opensuse-leap 15.6 | 1.23.10-150000.1.34.1 | [SUSE-SU-2025:01848-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01848-1.md) | Jun 9, 2025 |
| Linux | go1.23 sles 15.6 | 1.23.10-150000.1.34.1 | [SUSE-SU-2025:01848-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01848-1.md) | Jun 9, 2025 |
| Linux | go1.23 sles 15.7 | 1.23.10-150000.1.34.1 | [SUSE-SU-2025:01848-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01848-1.md) | Jun 9, 2025 |
| Linux | go1.23-openssl opensuse-leap 15.6 | 1.23.12-150600.13.9.1 | [SUSE-SU-2025:03159-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03159-1.md) | Sep 11, 2025 |
| Linux | go1.23-openssl sles 15.6 | 1.23.12-150600.13.9.1 | [SUSE-SU-2025:03159-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03159-1.md) | Sep 11, 2025 |
| Linux | go1.23-openssl sles 15.7 | 1.23.12-150600.13.9.1 | [SUSE-SU-2025:03159-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03159-1.md) | Sep 11, 2025 |
| Linux | go1.24 opensuse-leap 15.6 | 1.24.4-150000.1.26.1 | [SUSE-SU-2025:01846-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01846-1.md) | Jun 9, 2025 |
| Linux | go1.24 sles 15.6 | 1.24.4-150000.1.26.1 | [SUSE-SU-2025:01846-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01846-1.md) | Jun 9, 2025 |
| Linux | go1.24 sles 15.7 | 1.24.4-150000.1.26.1 | [SUSE-SU-2025:01846-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-01846-1.md) | Jun 9, 2025 |
| Linux | go1.24-openssl opensuse-leap 15.6 | 1.24.6-150600.13.9.1 | [SUSE-SU-2025:03158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03158-1.md) | Sep 11, 2025 |
| Linux | go1.24-openssl sles 15.6 | 1.24.6-150600.13.9.1 | [SUSE-SU-2025:03158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03158-1.md) | Sep 11, 2025 |
| Linux | go1.24-openssl sles 15.7 | 1.24.6-150600.13.9.1 | [SUSE-SU-2025:03158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03158-1.md) | Sep 11, 2025 |
| Linux | golang RHEL 10 | 1.24.4-1.el10_0 | [RHSA-2025:10677](https://patchblox.com/security/data/fix/linux/rhsa-2025-10677.md) | Jun 11, 2025 |
| Linux | golang RHEL 8 | 0:1.24.4-1.module+el8.10.0+23323+67916f33 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang almalinux 8 | 1.24.4-1.module_el8.10.0+4027+41c6fed2 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang amzn 2023 | 1.24.4-1.amzn2023.0.1 | [ALAS2023-2025-1028](https://patchblox.com/security/data/fix/linux/alas2023-2025-1028.md) | Jun 18, 2025 |
| Linux | golang ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | golang ol 8 | 0:1.24.4-1.module+el8.10.0+90631+36e43025 | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | golang ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | golang rocky 10 | 0:1.24.4-1.el10_0 | [RLSA-2025:10677](https://patchblox.com/security/data/fix/linux/rlsa-2025-10677.md) | Oct 3, 2025 |
| Linux | golang rocky 8 | 0:1.24.4-1.module+el8.10.0+2008+0bb8dc3e | [RLSA-2025:10672](https://patchblox.com/security/data/fix/linux/rlsa-2025-10672.md) | Jul 29, 2025 |
| Linux | golang rocky 9 | 0:1.24.4-1.el9_6 | [RLSA-2025:10676](https://patchblox.com/security/data/fix/linux/rlsa-2025-10676.md) | Oct 4, 2025 |
| Linux | golang-1.22 Ubuntu 22.04.1 LTS (jammy) | 1.22.2-2~22.04.3 | [golang-1.22 1.22.2-2~22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-golang-1.22-1.22.2-2-22.04.3.md) | Jun 11, 2025 |
| Linux | golang-1.22 Ubuntu 24.04.5 LTS (noble) | 1.22.2-2ubuntu0.4 | [golang-1.22 1.22.2-2ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-golang-1.22-1.22.2-2ubuntu0.4.md) | Jun 11, 2025 |
| Linux | golang-1.22 Ubuntu 24.10 (oracular) | 1.22.8-1ubuntu0.1 | [golang-1.22 1.22.8-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-golang-1.22-1.22.8-1ubuntu0.1.md) | Jan 16, 2026 |
| Linux | golang-1.22-go Ubuntu 22.04.1 LTS (jammy) | 1.22.2-2~22.04.3 | [golang-1.22-go 1.22.2-2~22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-golang-1.22-go-1.22.2-2-22.04.3.md) | Jun 11, 2025 |
| Linux | golang-1.22-go Ubuntu 24.04.5 LTS (noble) | 1.22.2-2ubuntu0.4 | [golang-1.22-go 1.22.2-2ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-golang-1.22-go-1.22.2-2ubuntu0.4.md) | Jun 11, 2025 |
| Linux | golang-1.22-go Ubuntu 24.10 (oracular) | 1.22.8-1ubuntu0.1 | [golang-1.22-go 1.22.8-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-golang-1.22-go-1.22.8-1ubuntu0.1.md) | Jan 16, 2026 |
| Linux | golang-1.22-src Ubuntu 22.04.1 LTS (jammy) | 1.22.2-2~22.04.3 | [golang-1.22-src 1.22.2-2~22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-golang-1.22-src-1.22.2-2-22.04.3.md) | Jun 11, 2025 |
| Linux | golang-1.22-src Ubuntu 24.04.5 LTS (noble) | 1.22.2-2ubuntu0.4 | [golang-1.22-src 1.22.2-2ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-golang-1.22-src-1.22.2-2ubuntu0.4.md) | Jun 11, 2025 |
| Linux | golang-1.22-src Ubuntu 24.10 (oracular) | 1.22.8-1ubuntu0.1 | [golang-1.22-src 1.22.8-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-golang-1.22-src-1.22.8-1ubuntu0.1.md) | Jan 16, 2026 |
| Linux | golang-1.24 Debian 13.5 (trixie) | 1.24.4-1 | [DEBIAN-CVE-2025-4673](https://patchblox.com/security/data/fix/linux/debian-cve-2025-4673.md) | Jun 11, 2025 |
| Linux | golang-bin RHEL 8 | 0:1.24.4-1.module+el8.10.0+23323+67916f33 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-bin RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-bin almalinux 8 | 1.24.4-1.module_el8.10.0+4027+41c6fed2 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-bin almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-bin amzn 2023 | 1.24.4-1.amzn2023.0.1 | [ALAS2023-2025-1028](https://patchblox.com/security/data/fix/linux/alas2023-2025-1028.md) | Jun 18, 2025 |
| Linux | golang-bin ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | golang-bin ol 8 | 0:1.24.4-1.module+el8.10.0+90631+36e43025 | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | golang-bin ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | golang-docs RHEL 8 | 0:1.24.4-1.module+el8.10.0+23323+67916f33 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-docs RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-docs almalinux 10 | 1.24.4-1.el10_0.alma.1 | [ALSA-2025:10677](https://patchblox.com/security/data/fix/linux/alsa-2025-10677.md) | Jul 9, 2025 |
| Linux | golang-docs almalinux 8 | 1.24.4-1.module_el8.10.0+4027+41c6fed2 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-docs almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-docs amzn 2023 | 1.24.4-1.amzn2023.0.1 | [ALAS2023-2025-1028](https://patchblox.com/security/data/fix/linux/alas2023-2025-1028.md) | Jun 18, 2025 |
| Linux | golang-docs ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | golang-docs ol 8 | 0:1.24.4-1.module+el8.10.0+90631+36e43025 | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | golang-docs ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | golang-github-prometheus-prometheus sles 15.7 | 3.13.2-150100.4.40.2 | [SUSE-SU-2026:4606-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4606-1.md) | Nov 7, 2026 |
| Linux | golang-misc RHEL 8 | 0:1.24.4-1.module+el8.10.0+23323+67916f33 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-misc RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-misc almalinux 10 | 1.24.4-1.el10_0.alma.1 | [ALSA-2025:10677](https://patchblox.com/security/data/fix/linux/alsa-2025-10677.md) | Jul 9, 2025 |
| Linux | golang-misc almalinux 8 | 1.24.4-1.module_el8.10.0+4027+41c6fed2 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-misc almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-misc amzn 2023 | 1.24.4-1.amzn2023.0.1 | [ALAS2023-2025-1028](https://patchblox.com/security/data/fix/linux/alas2023-2025-1028.md) | Jun 18, 2025 |
| Linux | golang-misc ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | golang-misc ol 8 | 0:1.24.4-1.module+el8.10.0+90631+36e43025 | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | golang-misc ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | golang-race RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-race almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-race ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | golang-race ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | golang-shared amzn 2023 | 1.24.4-1.amzn2023.0.1 | [ALAS2023-2025-1028](https://patchblox.com/security/data/fix/linux/alas2023-2025-1028.md) | Jun 18, 2025 |
| Linux | golang-src RHEL 8 | 0:1.24.4-1.module+el8.10.0+23323+67916f33 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-src RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-src almalinux 10 | 1.24.4-1.el10_0.alma.1 | [ALSA-2025:10677](https://patchblox.com/security/data/fix/linux/alsa-2025-10677.md) | Jul 9, 2025 |
| Linux | golang-src almalinux 8 | 1.24.4-1.module_el8.10.0+4027+41c6fed2 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-src almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-src amzn 2023 | 1.24.4-1.amzn2023.0.1 | [ALAS2023-2025-1028](https://patchblox.com/security/data/fix/linux/alas2023-2025-1028.md) | Jun 18, 2025 |
| Linux | golang-src ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | golang-src ol 8 | 0:1.24.4-1.module+el8.10.0+90631+36e43025 | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | golang-src ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | golang-tests RHEL 8 | 0:1.24.4-1.module+el8.10.0+23323+67916f33 | [RHSA-2025:10672](https://patchblox.com/security/data/fix/linux/rhsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-tests RHEL 9 | 0:1.24.4-1.el9_6 | [RHSA-2025:10676](https://patchblox.com/security/data/fix/linux/rhsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-tests almalinux 10 | 1.24.4-1.el10_0.alma.1 | [ALSA-2025:10677](https://patchblox.com/security/data/fix/linux/alsa-2025-10677.md) | Jul 9, 2025 |
| Linux | golang-tests almalinux 8 | 1.24.4-1.module_el8.10.0+4027+41c6fed2 | [ALSA-2025:10672](https://patchblox.com/security/data/fix/linux/alsa-2025-10672.md) | Jul 9, 2025 |
| Linux | golang-tests almalinux 9 | 1.24.4-1.el9_6 | [ALSA-2025:10676](https://patchblox.com/security/data/fix/linux/alsa-2025-10676.md) | Jul 9, 2025 |
| Linux | golang-tests amzn 2023 | 1.24.4-1.amzn2023.0.1 | [ALAS2023-2025-1028](https://patchblox.com/security/data/fix/linux/alas2023-2025-1028.md) | Jun 18, 2025 |
| Linux | golang-tests ol 10 | 0:1.24.4-1.el10_0 | [ELSA-2025-10677](https://patchblox.com/security/data/fix/linux/elsa-2025-10677.md) | Jul 10, 2025 |
| Linux | golang-tests ol 8 | 0:1.24.4-1.module+el8.10.0+90631+36e43025 | [ELSA-2025-10672](https://patchblox.com/security/data/fix/linux/elsa-2025-10672.md) | Jul 15, 2025 |
| Linux | golang-tests ol 9 | 0:1.24.4-1.el9_6 | [ELSA-2025-10676](https://patchblox.com/security/data/fix/linux/elsa-2025-10676.md) | Jul 8, 2025 |
| Linux | libcap amzn 2023 | 2.73-1.amzn2023.0.3 | [ALAS2023-2025-1141](https://patchblox.com/security/data/fix/linux/alas2023-2025-1141.md) | Aug 5, 2025 |
| Linux | libcap-debuginfo amzn 2023 | 2.73-1.amzn2023.0.3 | [ALAS2023-2025-1141](https://patchblox.com/security/data/fix/linux/alas2023-2025-1141.md) | Aug 5, 2025 |
| Linux | libcap-debugsource amzn 2023 | 2.73-1.amzn2023.0.3 | [ALAS2023-2025-1141](https://patchblox.com/security/data/fix/linux/alas2023-2025-1141.md) | Aug 5, 2025 |
| Linux | libcap-devel amzn 2023 | 2.73-1.amzn2023.0.3 | [ALAS2023-2025-1141](https://patchblox.com/security/data/fix/linux/alas2023-2025-1141.md) | Aug 5, 2025 |
| Linux | libcap-static amzn 2023 | 2.73-1.amzn2023.0.3 | [ALAS2023-2025-1141](https://patchblox.com/security/data/fix/linux/alas2023-2025-1141.md) | Aug 5, 2025 |
| Linux | nerdctl amzn 2023 | 2.1.2-1.amzn2023.0.1 | [ALAS2023-2025-1075](https://patchblox.com/security/data/fix/linux/alas2023-2025-1075.md) | Jul 3, 2025 |
| Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.5 | [ALAS2023-2025-1079](https://patchblox.com/security/data/fix/linux/alas2023-2025-1079.md) | Jul 3, 2025 |
| Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.5 | [ALAS2023-2025-1079](https://patchblox.com/security/data/fix/linux/alas2023-2025-1079.md) | Jul 3, 2025 |
| Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.5 | [ALAS2023-2025-1079](https://patchblox.com/security/data/fix/linux/alas2023-2025-1079.md) | Jul 3, 2025 |
| Linux | opentelemetry-collector RHEL 10 | 0.127.0-3.el10_0 | [RHSA-2025:16432](https://patchblox.com/security/data/fix/linux/rhsa-2025-16432.md) | Jun 11, 2025 |
| Linux | opentelemetry-collector RHEL 9 | 0:0.127.0-2.el9_6 | [RHSA-2025:15887](https://patchblox.com/security/data/fix/linux/rhsa-2025-15887.md) | Sep 16, 2025 |
| Linux | opentelemetry-collector almalinux 10 | 0.127.0-3.el10_0 | [ALSA-2025:16432](https://patchblox.com/security/data/fix/linux/alsa-2025-16432.md) | Sep 23, 2025 |
| Linux | opentelemetry-collector almalinux 9 | 0.127.0-2.el9_6 | [ALSA-2025:15887](https://patchblox.com/security/data/fix/linux/alsa-2025-15887.md) | Sep 16, 2025 |
| Linux | opentelemetry-collector rocky 10 | 0:0.127.0-3.el10_0 | [RLSA-2025:16432](https://patchblox.com/security/data/fix/linux/rlsa-2025-16432.md) | Oct 3, 2025 |
| Linux | opentelemetry-collector rocky 9 | 0:0.127.0-2.el9_6 | [RLSA-2025:15887](https://patchblox.com/security/data/fix/linux/rlsa-2025-15887.md) | Oct 10, 2025 |
| Linux | runc amzn 2023 | 1.2.6-1.amzn2023.0.1 | [ALAS2023-2025-1078](https://patchblox.com/security/data/fix/linux/alas2023-2025-1078.md) | Jul 3, 2025 |
| Linux | runc-debuginfo amzn 2023 | 1.2.6-1.amzn2023.0.1 | [ALAS2023-2025-1078](https://patchblox.com/security/data/fix/linux/alas2023-2025-1078.md) | Jul 3, 2025 |
| Linux | runc-debugsource amzn 2023 | 1.2.6-1.amzn2023.0.1 | [ALAS2023-2025-1078](https://patchblox.com/security/data/fix/linux/alas2023-2025-1078.md) | Jul 3, 2025 |
| Linux | runfinch-finch amzn 2023 | 1.8.3-1.amzn2023.0.1 | [ALAS2023-2025-1073](https://patchblox.com/security/data/fix/linux/alas2023-2025-1073.md) | Jul 3, 2025 |
| Linux | soci-snapshotter amzn 2023 | 0.9.0-1.amzn2023.0.4 | [ALAS2023-2025-1076](https://patchblox.com/security/data/fix/linux/alas2023-2025-1076.md) | Jul 3, 2025 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.