# CVE-2026-27145: Inefficient candidate hostname parsing in crypto/x509

CVE-2026-27145 is fixed in 88 products on 2 platforms, first by RHSA-2026:49703, released April 30, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-27145
- Priority: High
- CVSS: 8.2 (Moderate)
- EPSS: 0.0059
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 2, 2026
- Weakness: CWE-407: Inefficient Algorithmic Complexity
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27145

## Description

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Go Programming Language | 1.26.4 | [Go Programming Language 1.26.4](https://patchblox.com/security/data/fix/windows-app/golang.go-1.26.4.md) | May 29, 2026 |
| Linux | amazon-cloudwatch-agent amzn 2023 | 1.300069.1-1.amzn2023 | [ALAS2023-2026-2025](https://patchblox.com/security/data/fix/linux/alas2023-2026-2025.md) | Aug 3, 2026 |
| Linux | compat-golang-github-cpuguy83-md2man-2-devel amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 |
| Linux | containerd amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 |
| Linux | containerd-debuginfo amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 |
| Linux | containerd-debugsource amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 |
| Linux | containerd-stress amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 |
| Linux | containerd-stress-debuginfo amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 |
| Linux | credentials-fetcher amzn 2023 | 2.0.3-1.amzn2023.0.1 | [ALAS2023-2026-1885](https://patchblox.com/security/data/fix/linux/alas2023-2026-1885.md) | Jun 22, 2026 |
| Linux | delve RHEL 10 | 1.26.1-1.el10_0 | [RHSA-2026:49703](https://patchblox.com/security/data/fix/linux/rhsa-2026-49703.md) | Apr 30, 2026 |
| Linux | delve RHEL 8 | 0:1.26.1-1.module+el8.10.0+24516+40554724 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | delve almalinux 8 | 1.26.1-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | delve ol 8 | 0:1.26.1-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | delve rocky 8 | 0:1.26.1-1.module+el8.10.0+40244+e7cb3ff8 | [RLSA-2026:38995](https://patchblox.com/security/data/fix/linux/rlsa-2026-38995.md) | Jul 15, 2026 |
| Linux | dnsx Fedora 43 | 1.3.0-1.fc43 | [FEDORA-2026-1C78E384E3](https://patchblox.com/security/data/fix/linux/fedora-2026-1c78e384e3.md) | Jul 17, 2026 |
| Linux | dnsx-debuginfo Fedora 43 | 1.3.0-1.fc43 | [FEDORA-2026-1C78E384E3](https://patchblox.com/security/data/fix/linux/fedora-2026-1c78e384e3.md) | Jul 17, 2026 |
| Linux | dnsx-debugsource Fedora 43 | 1.3.0-1.fc43 | [FEDORA-2026-1C78E384E3](https://patchblox.com/security/data/fix/linux/fedora-2026-1c78e384e3.md) | Jul 17, 2026 |
| Linux | docker amzn 2023 | 25.0.16-1.amzn2023.0.3 | [ALAS2023-2026-1901](https://patchblox.com/security/data/fix/linux/alas2023-2026-1901.md) | Jul 6, 2026 |
| Linux | docker-debuginfo amzn 2023 | 25.0.16-1.amzn2023.0.3 | [ALAS2023-2026-1901](https://patchblox.com/security/data/fix/linux/alas2023-2026-1901.md) | Jul 6, 2026 |
| Linux | docker-debugsource amzn 2023 | 25.0.16-1.amzn2023.0.3 | [ALAS2023-2026-1901](https://patchblox.com/security/data/fix/linux/alas2023-2026-1901.md) | Jul 6, 2026 |
| Linux | ecs-init amzn 2023 | 1.105.0-1.amzn2023 | [ALAS2023-2026-1902](https://patchblox.com/security/data/fix/linux/alas2023-2026-1902.md) | Jul 6, 2026 |
| Linux | flightctl RHEL 10 | 1.2.1-1.el10 | [RHSA-2026:68335](https://patchblox.com/security/data/fix/linux/rhsa-2026-68335.md) | Aug 13, 2026 |
| Linux | go-fdo-client RHEL 10 | 1.0.0-4.el10_2.5 | [RHSA-2026:46394](https://patchblox.com/security/data/fix/linux/rhsa-2026-46394.md) | Jun 2, 2026 |
| Linux | go-fdo-client almalinux 10 | 1.0.0-4.el10_2.5 | [ALSA-2026:46394](https://patchblox.com/security/data/fix/linux/alsa-2026-46394.md) | Jul 27, 2026 |
| Linux | go-fdo-client ol 10 | 0:1.0.0-4.el10_2.5 | [ELSA-2026-46394](https://patchblox.com/security/data/fix/linux/elsa-2026-46394.md) | Jul 27, 2026 |
| Linux | go-fdo-client rocky 10 | 0:1.0.0-4.el10_2.5 | [RLSA-2026:46394](https://patchblox.com/security/data/fix/linux/rlsa-2026-46394.md) | Jul 28, 2026 |
| Linux | go-fdo-server RHEL 10 | 1.0.1-2.el10_2.3 | [RHSA-2026:46395](https://patchblox.com/security/data/fix/linux/rhsa-2026-46395.md) | Jun 2, 2026 |
| Linux | go-fdo-server almalinux 10 | 1.0.1-2.el10_2.3 | [ALSA-2026:46395](https://patchblox.com/security/data/fix/linux/alsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-fdo-server ol 10 | 0:1.0.1-2.el10_2.3 | [ELSA-2026-46395](https://patchblox.com/security/data/fix/linux/elsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-fdo-server rocky 10 | 0:1.0.1-2.el10_2.3 | [RLSA-2026:46395](https://patchblox.com/security/data/fix/linux/rlsa-2026-46395.md) | Jul 28, 2026 |
| Linux | go-fdo-server-manufacturer almalinux 10 | 1.0.1-2.el10_2.3 | [ALSA-2026:46395](https://patchblox.com/security/data/fix/linux/alsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-fdo-server-manufacturer ol 10 | 0:1.0.1-2.el10_2.3 | [ELSA-2026-46395](https://patchblox.com/security/data/fix/linux/elsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-fdo-server-owner almalinux 10 | 1.0.1-2.el10_2.3 | [ALSA-2026:46395](https://patchblox.com/security/data/fix/linux/alsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-fdo-server-owner ol 10 | 0:1.0.1-2.el10_2.3 | [ELSA-2026-46395](https://patchblox.com/security/data/fix/linux/elsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-fdo-server-rendezvous almalinux 10 | 1.0.1-2.el10_2.3 | [ALSA-2026:46395](https://patchblox.com/security/data/fix/linux/alsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-fdo-server-rendezvous ol 10 | 0:1.0.1-2.el10_2.3 | [ELSA-2026-46395](https://patchblox.com/security/data/fix/linux/elsa-2026-46395.md) | Jul 27, 2026 |
| Linux | go-toolset RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | go-toolset RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | go-toolset almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | go-toolset almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | go-toolset almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | go-toolset ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | go1.25 opensuse-leap 16.0 | 1.25.11-160000.1.1 | [OPENSUSE-SU-2026:20977-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20977-1.md) | Jun 17, 2026 |
| Linux | go1.25 sles 15.6 | 1.25.11-150000.1.41.1 | [SUSE-SU-2026:2326-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2326-1.md) | Jun 9, 2026 |
| Linux | go1.25 sles 15.7 | 1.25.11-150000.1.41.1 | [SUSE-SU-2026:2326-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2326-1.md) | Jun 9, 2026 |
| Linux | go1.25 sles 16.0 | 1.25.11-160000.1.1 | [SUSE-SU-2026:22155-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22155-1.md) | Jun 17, 2026 |
| Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21319-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21319-1.md) | Jul 13, 2026 |
| Linux | go1.25-openssl sles 15.6 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 |
| Linux | go1.25-openssl sles 15.7 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 |
| Linux | go1.25-openssl sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22638-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22638-1.md) | Jul 13, 2026 |
| Linux | go1.26 opensuse-leap 16.0 | 1.26.4-160000.1.1 | [OPENSUSE-SU-2026:20976-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20976-1.md) | Jun 17, 2026 |
| Linux | go1.26 sles 15.6 | 1.26.4-150000.1.15.1 | [SUSE-SU-2026:2327-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2327-1.md) | Jun 9, 2026 |
| Linux | go1.26 sles 15.7 | 1.26.4-150000.1.15.1 | [SUSE-SU-2026:2327-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2327-1.md) | Jun 9, 2026 |
| Linux | go1.26 sles 16.0 | 1.26.4-160000.1.1 | [SUSE-SU-2026:22154-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22154-1.md) | Jun 17, 2026 |
| Linux | go1.26-openssl opensuse-leap 16.0 | 1.26.4-160000.1.1 | [OPENSUSE-SU-2026:21254-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21254-1.md) | Jul 7, 2026 |
| Linux | go1.26-openssl sles 15.6 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 |
| Linux | go1.26-openssl sles 15.7 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 |
| Linux | go1.26-openssl sles 16.0 | 1.26.4-160000.1.1 | [SUSE-SU-2026:22572-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22572-1.md) | Jul 7, 2026 |
| Linux | golang RHEL 10 | 1.26.5-1.el10_0 | [RHSA-2026:49702](https://patchblox.com/security/data/fix/linux/rhsa-2026-49702.md) | May 27, 2026 |
| Linux | golang RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | golang almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | golang almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | golang amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 |
| Linux | golang ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang rocky 8 | 0:1.26.5-1.module+el8.10.0+40244+e7cb3ff8 | [RLSA-2026:38995](https://patchblox.com/security/data/fix/linux/rlsa-2026-38995.md) | Jul 15, 2026 |
| Linux | golang-1.26 Debian 14 | 1.26.4-1 | [DEBIAN-CVE-2026-27145](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27145.md) | Jun 24, 2026 |
| Linux | golang-bin RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-bin RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | golang-bin almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | golang-bin almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-bin almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | golang-bin amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 |
| Linux | golang-bin ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-docs RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-docs RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | golang-docs almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | golang-docs almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-docs almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | golang-docs amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 |
| Linux | golang-docs ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-github-burntsushi-toml amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 |
| Linux | golang-github-burntsushi-toml-debuginfo amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 |
| Linux | golang-github-burntsushi-toml-debugsource amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 |
| Linux | golang-github-burntsushi-toml-devel amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 |
| Linux | golang-github-burntsushi-toml-test amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 |
| Linux | golang-github-burntsushi-toml-test-debuginfo amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 |
| Linux | golang-github-burntsushi-toml-test-debugsource amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 |
| Linux | golang-github-burntsushi-toml-test-devel amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 |
| Linux | golang-github-cpuguy83-md2man amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 |
| Linux | golang-github-cpuguy83-md2man-debuginfo amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 |
| Linux | golang-github-cpuguy83-md2man-debugsource amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 |
| Linux | golang-github-cpuguy83-md2man-devel amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 |
| Linux | golang-github-openprinting-ipp-usb Fedora 43 | 0.9.34-1.fc43 | [FEDORA-2026-D7DFD8E9BA](https://patchblox.com/security/data/fix/linux/fedora-2026-d7dfd8e9ba.md) | Jun 30, 2026 |
| Linux | golang-github-openprinting-ipp-usb RHEL 10 | 0.9.27-7.el10_2.2 | [RHSA-2026:35832](https://patchblox.com/security/data/fix/linux/rhsa-2026-35832.md) | Jun 2, 2026 |
| Linux | golang-github-openprinting-ipp-usb rocky 10 | 0:0.9.27-7.el10_2.2 | [RLSA-2026:35832](https://patchblox.com/security/data/fix/linux/rlsa-2026-35832.md) | Jul 7, 2026 |
| Linux | golang-github-openprinting-ipp-usb-debugsource Fedora 43 | 0.9.34-1.fc43 | [FEDORA-2026-D7DFD8E9BA](https://patchblox.com/security/data/fix/linux/fedora-2026-d7dfd8e9ba.md) | Jun 30, 2026 |
| Linux | golang-github-openprinting-ipp-usb-devel Fedora 43 | 0.9.34-1.fc43 | [FEDORA-2026-D7DFD8E9BA](https://patchblox.com/security/data/fix/linux/fedora-2026-d7dfd8e9ba.md) | Jun 30, 2026 |
| Linux | golang-misc RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-misc RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | golang-misc almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | golang-misc almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-misc almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | golang-misc amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 |
| Linux | golang-misc ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-race RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-race RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | golang-race almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | golang-race almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-race almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | golang-race ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-shared amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 |
| Linux | golang-src RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-src RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | golang-src almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | golang-src almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-src almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | golang-src amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 |
| Linux | golang-src ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-tests RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-tests RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 |
| Linux | golang-tests almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 |
| Linux | golang-tests almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-tests almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 |
| Linux | golang-tests amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 |
| Linux | golang-tests ol 8 | 0:1.26.5-1.0.1.module+el8.10.0+90954+4b0fdef3 | [ELSA-2026-38995](https://patchblox.com/security/data/fix/linux/elsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-x-perf Fedora 43 | 0-0.36.20260904git19be9d8.fc43 | [FEDORA-2026-2F89CC806E](https://patchblox.com/security/data/fix/linux/fedora-2026-2f89cc806e.md) | Sep 4, 2026 |
| Linux | golang-x-perf-debuginfo Fedora 43 | 0-0.36.20260904git19be9d8.fc43 | [FEDORA-2026-2F89CC806E](https://patchblox.com/security/data/fix/linux/fedora-2026-2f89cc806e.md) | Sep 4, 2026 |
| Linux | golang-x-perf-debugsource Fedora 43 | 0-0.36.20260904git19be9d8.fc43 | [FEDORA-2026-2F89CC806E](https://patchblox.com/security/data/fix/linux/fedora-2026-2f89cc806e.md) | Sep 4, 2026 |
| Linux | golist amzn 2023 | 0.10.4-12.amzn2023.0.10 | [ALAS2023-2026-1874](https://patchblox.com/security/data/fix/linux/alas2023-2026-1874.md) | Jun 22, 2026 |
| Linux | golist-debuginfo amzn 2023 | 0.10.4-12.amzn2023.0.10 | [ALAS2023-2026-1874](https://patchblox.com/security/data/fix/linux/alas2023-2026-1874.md) | Jun 22, 2026 |
| Linux | golist-debugsource amzn 2023 | 0.10.4-12.amzn2023.0.10 | [ALAS2023-2026-1874](https://patchblox.com/security/data/fix/linux/alas2023-2026-1874.md) | Jun 22, 2026 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | grpcurl Fedora 43 | 1.9.4-1.fc43 | [FEDORA-2026-275646EA83](https://patchblox.com/security/data/fix/linux/fedora-2026-275646ea83.md) | Sep 2, 2026 |
| Linux | grpcurl-debuginfo Fedora 43 | 1.9.4-1.fc43 | [FEDORA-2026-275646EA83](https://patchblox.com/security/data/fix/linux/fedora-2026-275646ea83.md) | Sep 2, 2026 |
| Linux | grpcurl-debugsource Fedora 43 | 1.9.4-1.fc43 | [FEDORA-2026-275646EA83](https://patchblox.com/security/data/fix/linux/fedora-2026-275646ea83.md) | Sep 2, 2026 |
| Linux | ipp-usb Fedora 43 | 0.9.34-1.fc43 | [FEDORA-2026-D7DFD8E9BA](https://patchblox.com/security/data/fix/linux/fedora-2026-d7dfd8e9ba.md) | Jun 30, 2026 |
| Linux | ipp-usb almalinux 10 | 0.9.27-7.el10_2.2 | [ALSA-2026:35832](https://patchblox.com/security/data/fix/linux/alsa-2026-35832.md) | Jul 6, 2026 |
| Linux | ipp-usb ol 10 | 0:0.9.27-7.el10_2.2 | [ELSA-2026-35832](https://patchblox.com/security/data/fix/linux/elsa-2026-35832.md) | Jul 16, 2026 |
| Linux | ipp-usb-debuginfo Fedora 43 | 0.9.34-1.fc43 | [FEDORA-2026-D7DFD8E9BA](https://patchblox.com/security/data/fix/linux/fedora-2026-d7dfd8e9ba.md) | Jun 30, 2026 |
| Linux | mqttcli Fedora 43 | 0.2.8-2.fc43 | [FEDORA-2026-E5726EFB1A](https://patchblox.com/security/data/fix/linux/fedora-2026-e5726efb1a.md) | Aug 22, 2026 |
| Linux | mqttcli-debuginfo Fedora 43 | 0.2.8-2.fc43 | [FEDORA-2026-E5726EFB1A](https://patchblox.com/security/data/fix/linux/fedora-2026-e5726efb1a.md) | Aug 22, 2026 |
| Linux | mqttcli-debugsource Fedora 43 | 0.2.8-2.fc43 | [FEDORA-2026-E5726EFB1A](https://patchblox.com/security/data/fix/linux/fedora-2026-e5726efb1a.md) | Aug 22, 2026 |
| Linux | nerdctl amzn 2023 | 2.2.2-1.amzn2023.0.4 | [ALAS2023-2026-1908](https://patchblox.com/security/data/fix/linux/alas2023-2026-1908.md) | Jul 6, 2026 |
| Linux | node-exporter Fedora 43 | 1.12.1-1.fc43 | [FEDORA-2026-5924722657](https://patchblox.com/security/data/fix/linux/fedora-2026-5924722657.md) | Jul 15, 2026 |
| Linux | node-exporter-debuginfo Fedora 43 | 1.12.1-1.fc43 | [FEDORA-2026-5924722657](https://patchblox.com/security/data/fix/linux/fedora-2026-5924722657.md) | Jul 15, 2026 |
| Linux | node-exporter-debugsource Fedora 43 | 1.12.1-1.fc43 | [FEDORA-2026-5924722657](https://patchblox.com/security/data/fix/linux/fedora-2026-5924722657.md) | Jul 15, 2026 |
| Linux | opentelemetry-collector RHEL 10 | 0.152.1-1.el10_0 | [RHSA-2026:53413](https://patchblox.com/security/data/fix/linux/rhsa-2026-53413.md) | Jul 2, 2026 |
| Linux | opentelemetry-collector RHEL 9 | 0:0.152.1-1.el9_8 | [RHSA-2026:34359](https://patchblox.com/security/data/fix/linux/rhsa-2026-34359.md) | Jul 2, 2026 |
| Linux | opentelemetry-collector almalinux 10 | 0.152.1-1.el10_2 | [ALSA-2026:34357](https://patchblox.com/security/data/fix/linux/alsa-2026-34357.md) | Jul 1, 2026 |
| Linux | opentelemetry-collector almalinux 9 | 0.152.1-1.el9_8 | [ALSA-2026:34359](https://patchblox.com/security/data/fix/linux/alsa-2026-34359.md) | Jul 1, 2026 |
| Linux | opentelemetry-collector rocky 10 | 0:0.152.1-1.el10_2 | [RLSA-2026:34357](https://patchblox.com/security/data/fix/linux/rlsa-2026-34357.md) | Jul 7, 2026 |
| Linux | opentelemetry-collector rocky 9 | 0:0.152.1-1.el9_8 | [RLSA-2026:34359](https://patchblox.com/security/data/fix/linux/rlsa-2026-34359.md) | Jul 5, 2026 |
| Linux | rclone opensuse-leap 16.0 | 1.74.4-bp160.1.1 | [OPENSUSE-SU-2026:21436-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21436-1.md) | Jul 22, 2026 |
| Linux | receptor RHEL 10 | 1.6.6-1.el10ap | [RHSA-2026:42080](https://patchblox.com/security/data/fix/linux/rhsa-2026-42080.md) | Jun 2, 2026 |
| Linux | restic Fedora 43 | 0.19.1-1.fc43 | [FEDORA-2026-A006788209](https://patchblox.com/security/data/fix/linux/fedora-2026-a006788209.md) | Jul 20, 2026 |
| Linux | restic-debuginfo Fedora 43 | 0.19.1-1.fc43 | [FEDORA-2026-A006788209](https://patchblox.com/security/data/fix/linux/fedora-2026-a006788209.md) | Jul 20, 2026 |
| Linux | restic-debugsource Fedora 43 | 0.19.1-1.fc43 | [FEDORA-2026-A006788209](https://patchblox.com/security/data/fix/linux/fedora-2026-a006788209.md) | Jul 20, 2026 |
| Linux | rhc RHEL 10 | 0.3.2-5.el10_0 | [RHSA-2026:53374](https://patchblox.com/security/data/fix/linux/rhsa-2026-53374.md) | Jun 2, 2026 |
| Linux | rhc RHEL 8 | 1:0.2.5-9.el8_10 | [RHSA-2026:41930](https://patchblox.com/security/data/fix/linux/rhsa-2026-41930.md) | Jul 21, 2026 |
| Linux | rhc RHEL 9 | 1:0.2.7-8.el9_8 | [RHSA-2026:39879](https://patchblox.com/security/data/fix/linux/rhsa-2026-39879.md) | Jul 18, 2026 |
| Linux | rhc-devel RHEL 9 | 1:0.2.7-8.el9_8 | [RHSA-2026:39879](https://patchblox.com/security/data/fix/linux/rhsa-2026-39879.md) | Jul 18, 2026 |
| Linux | rhc-worker-playbook RHEL 10 | 0.2.3-6.el10_0 | [RHSA-2026:54168](https://patchblox.com/security/data/fix/linux/rhsa-2026-54168.md) | Jun 2, 2026 |
| Linux | runc amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 |
| Linux | runc-debuginfo amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 |
| Linux | runc-debugsource amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 |
| Linux | skopeo RHEL 9 | 2:1.22.2-7.el9_8 | [RHSA-2026:36317](https://patchblox.com/security/data/fix/linux/rhsa-2026-36317.md) | Jul 8, 2026 |
| Linux | skopeo almalinux 9 | 2:1.22.2-7.el9_8 | [ALSA-2026:36317](https://patchblox.com/security/data/fix/linux/alsa-2026-36317.md) | Jul 7, 2026 |
| Linux | skopeo ol 9 | 2:1.22.2-7.el9_8 | [ELSA-2026-36317](https://patchblox.com/security/data/fix/linux/elsa-2026-36317.md) | Jul 7, 2026 |
| Linux | skopeo rocky 9 | 2:1.22.2-7.el9_8 | [RLSA-2026:36317](https://patchblox.com/security/data/fix/linux/rlsa-2026-36317.md) | Jul 8, 2026 |
| Linux | skopeo-tests RHEL 9 | 2:1.22.2-7.el9_8 | [RHSA-2026:36317](https://patchblox.com/security/data/fix/linux/rhsa-2026-36317.md) | Jul 8, 2026 |
| Linux | skopeo-tests almalinux 9 | 2:1.22.2-7.el9_8 | [ALSA-2026:36317](https://patchblox.com/security/data/fix/linux/alsa-2026-36317.md) | Jul 7, 2026 |
| Linux | skopeo-tests ol 9 | 2:1.22.2-7.el9_8 | [ELSA-2026-36317](https://patchblox.com/security/data/fix/linux/elsa-2026-36317.md) | Jul 7, 2026 |
| Linux | soci-snapshotter amzn 2023 | 0.14.1-1.amzn2023.0.1 | [ALAS2023-2026-1884](https://patchblox.com/security/data/fix/linux/alas2023-2026-1884.md) | Jun 22, 2026 |
| Linux | yggdrasil RHEL 10 | 0.4.7-5.el10_0 | [RHSA-2026:51187](https://patchblox.com/security/data/fix/linux/rhsa-2026-51187.md) | Jun 2, 2026 |
| Linux | yggdrasil almalinux 10 | 0.4.9.2-1.el10_2 | [ALSA-2026:39573](https://patchblox.com/security/data/fix/linux/alsa-2026-39573.md) | Jul 14, 2026 |
| Linux | yggdrasil ol 10 | 0:0.4.9.2-1.el10_2 | [ELSA-2026-39573](https://patchblox.com/security/data/fix/linux/elsa-2026-39573.md) | Jul 16, 2026 |
| Linux | yggdrasil rocky 10 | 0:0.4.9.2-1.el10_2 | [RLSA-2026:39573](https://patchblox.com/security/data/fix/linux/rlsa-2026-39573.md) | Jul 15, 2026 |
| Linux | yggdrasil-devel almalinux 10 | 0.4.9.2-1.el10_2 | [ALSA-2026:39573](https://patchblox.com/security/data/fix/linux/alsa-2026-39573.md) | Jul 14, 2026 |
| Linux | yggdrasil-devel ol 10 | 0:0.4.9.2-1.el10_2 | [ELSA-2026-39573](https://patchblox.com/security/data/fix/linux/elsa-2026-39573.md) | Jul 16, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.