# CVE-2025-61727: Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 CVE-2025-61727 is fixed in 43 products on 1 platform, first by SUSE-SU-2025:4336-1, released December 9, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-61727 - Priority: Routine - CVSS: 6.5 (Moderate) - EPSS: 0.0030 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Dec 6, 2025 - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61727 ## Description This update for go1.24 fixes the following issues: go1.24.11 (released 2025-12-02) includes two security fixes to the crypto/x509 package, as well as bug fixes to the runtime. (bsc#1236217) CVE-2025-61727 CVE-2025-61729: * go#76460 go#76445 bsc#1254431 security: fix CVE-2025-61729 crypto/x509: excessive resource consumption in printing error string for host certificate validation * go#76463 go#76442 bsc#1254430 security: fix CVE-2025-61727 crypto/x509: excluded subdomain constraint doesn't preclude wildcard SAN * go#76378 internal/cpu: incorrect CPU features bit parsing on loong64 cause illegal instruction core dumps on LA364 cores - Packaging: Migrate from update-alternatives to libalternatives (bsc#1245878) * This is an optional migration controlled via prjconf definition with_libalternatives * If with_libalternatives is not defined packaging continues to use update-alternatives ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | amazon-cloudwatch-agent amzn 2023 | 1.300062.1-1.amzn2023 | [ALAS2023-2025-1358](https://patchblox.com/security/data/fix/linux/alas2023-2025-1358.md) | Jan 7, 2026 | | Linux | amazon-ecr-credential-helper amzn 2023 | 0.11.0-2.amzn2023 | [ALAS2023-2025-1327](https://patchblox.com/security/data/fix/linux/alas2023-2025-1327.md) | Jan 7, 2026 | | Linux | amazon-ssm-agent amzn 2023 | 3.3.3572.0-1.amzn2023 | [ALAS2023-2025-1359](https://patchblox.com/security/data/fix/linux/alas2023-2025-1359.md) | Jan 7, 2026 | | Linux | captree amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | captree-debuginfo amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | cni-plugins amzn 2023 | 1.7.1-1.amzn2023.0.4 | [ALAS2023-2025-1321](https://patchblox.com/security/data/fix/linux/alas2023-2025-1321.md) | Jan 7, 2026 | | Linux | cni-plugins-debuginfo amzn 2023 | 1.7.1-1.amzn2023.0.4 | [ALAS2023-2025-1321](https://patchblox.com/security/data/fix/linux/alas2023-2025-1321.md) | Jan 7, 2026 | | Linux | cni-plugins-debugsource amzn 2023 | 1.7.1-1.amzn2023.0.4 | [ALAS2023-2025-1321](https://patchblox.com/security/data/fix/linux/alas2023-2025-1321.md) | Jan 7, 2026 | | Linux | containerd amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-debuginfo amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-debugsource amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-stress amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-stress-debuginfo amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | docker amzn 2023 | 25.0.13-1.amzn2023.0.3 | [ALAS2023-2025-1329](https://patchblox.com/security/data/fix/linux/alas2023-2025-1329.md) | Jan 7, 2026 | | Linux | docker-debuginfo amzn 2023 | 25.0.13-1.amzn2023.0.3 | [ALAS2023-2025-1329](https://patchblox.com/security/data/fix/linux/alas2023-2025-1329.md) | Jan 7, 2026 | | Linux | docker-debugsource amzn 2023 | 25.0.13-1.amzn2023.0.3 | [ALAS2023-2025-1329](https://patchblox.com/security/data/fix/linux/alas2023-2025-1329.md) | Jan 7, 2026 | | Linux | ecs-init amzn 2023 | 1.101.1-1.amzn2023 | [ALAS2023-2025-1341](https://patchblox.com/security/data/fix/linux/alas2023-2025-1341.md) | Jan 7, 2026 | | Linux | go1.24 opensuse-leap 15.6 | 1.24.11-150000.1.50.1 | [SUSE-SU-2025:4337-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4337-1.md) | Dec 9, 2025 | | Linux | go1.24 opensuse-leap 16.0 | 1.24.11-160000.1.1 | [OPENSUSE-SU-2025:20158-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20158-1.md) | Dec 12, 2025 | | Linux | go1.24 sles 15.6 | 1.24.11-150000.1.50.1 | [SUSE-SU-2025:4337-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4337-1.md) | Dec 9, 2025 | | Linux | go1.24 sles 15.7 | 1.24.11-150000.1.50.1 | [SUSE-SU-2025:4337-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4337-1.md) | Dec 9, 2025 | | Linux | go1.24 sles 16.0 | 1.24.11-160000.1.1 | [SUSE-SU-2025:21193-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-21193-1.md) | Dec 12, 2025 | | Linux | go1.24-openssl opensuse-leap 15.6 | 1.24.12-150600.13.15.1 | [SUSE-SU-2026:0308-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0308-1.md) | Jan 28, 2026 | | Linux | go1.24-openssl opensuse-leap 16.0 | 1.24.13-160000.1.1 | [OPENSUSE-SU-2026:20308-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20308-1.md) | Mar 3, 2026 | | Linux | go1.24-openssl sles 15.6 | 1.24.12-150600.13.15.1 | [SUSE-SU-2026:0308-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0308-1.md) | Jan 28, 2026 | | Linux | go1.24-openssl sles 15.7 | 1.24.12-150600.13.15.1 | [SUSE-SU-2026:0308-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0308-1.md) | Jan 28, 2026 | | Linux | go1.24-openssl sles 16.0 | 1.24.13-160000.1.1 | [SUSE-SU-2026:20629-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20629-1.md) | Mar 3, 2026 | | Linux | go1.25 opensuse-leap 15.6 | 1.25.5-150000.1.23.1 | [SUSE-SU-2025:4336-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4336-1.md) | Dec 9, 2025 | | Linux | go1.25 opensuse-leap 16.0 | 1.25.5-160000.1.1 | [OPENSUSE-SU-2025:20157-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20157-1.md) | Dec 12, 2025 | | Linux | go1.25 sles 15.6 | 1.25.5-150000.1.23.1 | [SUSE-SU-2025:4336-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4336-1.md) | Dec 9, 2025 | | Linux | go1.25 sles 15.7 | 1.25.5-150000.1.23.1 | [SUSE-SU-2025:4336-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4336-1.md) | Dec 9, 2025 | | Linux | go1.25 sles 16.0 | 1.25.5-160000.1.1 | [SUSE-SU-2025:21192-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-21192-1.md) | Dec 12, 2025 | | Linux | go1.25-openssl opensuse-leap 15.6 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 | | Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.7-160000.1.1 | [OPENSUSE-SU-2026:20301-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20301-1.md) | Mar 3, 2026 | | Linux | go1.25-openssl sles 15.6 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 | | Linux | go1.25-openssl sles 15.7 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 | | Linux | go1.25-openssl sles 16.0 | 1.25.7-160000.1.1 | [SUSE-SU-2026:20623-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20623-1.md) | Mar 3, 2026 | | Linux | golang amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-bin amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-docs amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-misc amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-shared amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-src amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-tests amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | govulncheck-vulndb opensuse-leap 15.6 | 0.0.20251209T172047-150000.1.127.1 | [SUSE-SU-2025:4395-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4395-1.md) | Dec 15, 2025 | | Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 | | Linux | govulncheck-vulndb sles 15.6 | 0.0.20251209T172047-150000.1.127.1 | [SUSE-SU-2025:4395-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4395-1.md) | Dec 15, 2025 | | Linux | libcap amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-debuginfo amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-debugsource amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-devel amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-static amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | nerdctl amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1326](https://patchblox.com/security/data/fix/linux/alas2023-2025-1326.md) | Jan 7, 2026 | | Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.7 | [ALAS2023-2025-1335](https://patchblox.com/security/data/fix/linux/alas2023-2025-1335.md) | Jan 7, 2026 | | Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.7 | [ALAS2023-2025-1335](https://patchblox.com/security/data/fix/linux/alas2023-2025-1335.md) | Jan 7, 2026 | | Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.7 | [ALAS2023-2025-1335](https://patchblox.com/security/data/fix/linux/alas2023-2025-1335.md) | Jan 7, 2026 | | Linux | runc amzn 2023 | 1.3.4-1.amzn2023.0.1 | [ALAS2023-2025-1328](https://patchblox.com/security/data/fix/linux/alas2023-2025-1328.md) | Jan 7, 2026 | | Linux | runc-debuginfo amzn 2023 | 1.3.4-1.amzn2023.0.1 | [ALAS2023-2025-1328](https://patchblox.com/security/data/fix/linux/alas2023-2025-1328.md) | Jan 7, 2026 | | Linux | runc-debugsource amzn 2023 | 1.3.4-1.amzn2023.0.1 | [ALAS2023-2025-1328](https://patchblox.com/security/data/fix/linux/alas2023-2025-1328.md) | Jan 7, 2026 | | Linux | runfinch-finch amzn 2023 | 1.10.0-1.amzn2023.0.6 | [ALAS2023-2025-1336](https://patchblox.com/security/data/fix/linux/alas2023-2025-1336.md) | Jan 7, 2026 | | Linux | soci-snapshotter amzn 2023 | 0.12.0-1.amzn2023.0.2 | [ALAS2023-2025-1334](https://patchblox.com/security/data/fix/linux/alas2023-2025-1334.md) | Jan 7, 2026 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.