# CVE-2026-39820: Quadratic string concatentation in consumeComment in net/mail

CVE-2026-39820 is fixed in 80 products on 2 platforms, first by Go Programming Language 1.26.3, released May 7, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-39820
- Priority: High
- CVSS: 8.8 (Important)
- EPSS: 0.0078
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 7, 2026
- Weakness: CWE-407: Inefficient Algorithmic Complexity
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39820

## Description

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Go Programming Language | 1.26.3 | [Go Programming Language 1.26.3](https://patchblox.com/security/data/fix/windows-app/golang.go-1.26.3.md) | May 7, 2026 |
| Linux | amazon-cloudwatch-agent amzn 2023 | 1.300066.2-2.amzn2023 | [ALAS2023-2026-1747](https://patchblox.com/security/data/fix/linux/alas2023-2026-1747.md) | May 25, 2026 |
| Linux | amazon-ecr-credential-helper amzn 2023 | 0.12.0-3.amzn2023 | [ALAS2023-2026-1738](https://patchblox.com/security/data/fix/linux/alas2023-2026-1738.md) | May 25, 2026 |
| Linux | captree amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | captree-debuginfo amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | cni-plugins amzn 2023 | 1.7.1-1.amzn2023.0.6 | [ALAS2023-2026-1723](https://patchblox.com/security/data/fix/linux/alas2023-2026-1723.md) | May 25, 2026 |
| Linux | cni-plugins-debuginfo amzn 2023 | 1.7.1-1.amzn2023.0.6 | [ALAS2023-2026-1723](https://patchblox.com/security/data/fix/linux/alas2023-2026-1723.md) | May 25, 2026 |
| Linux | cni-plugins-debugsource amzn 2023 | 1.7.1-1.amzn2023.0.6 | [ALAS2023-2026-1723](https://patchblox.com/security/data/fix/linux/alas2023-2026-1723.md) | May 25, 2026 |
| Linux | compat-golang-github-cpuguy83-md2man-2-devel amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | containerd amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-debuginfo amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-debugsource amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-stress amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | containerd-stress-debuginfo amzn 2023 | 2.2.3-1.amzn2023.0.2 | [ALAS2023-2026-1737](https://patchblox.com/security/data/fix/linux/alas2023-2026-1737.md) | May 25, 2026 |
| Linux | credentials-fetcher amzn 2023 | 2.0.1-1.amzn2023.0.5 | [ALAS2023-2026-1744](https://patchblox.com/security/data/fix/linux/alas2023-2026-1744.md) | May 25, 2026 |
| Linux | delve RHEL 8 | 0:1.25.2-1.module+el8.10.0+23746+9db33b5e | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | delve almalinux 8 | 1.25.2-1.module_el8.10.0+4074+24330916 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | delve ol 8 | 0:1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | delve rocky 8 | 0:1.25.2-1.module+el8.10.0+40035+ee0a7047 | [RLSA-2026:22112](https://patchblox.com/security/data/fix/linux/rlsa-2026-22112.md) | Aug 26, 2026 |
| Linux | docker amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | docker-debuginfo amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | docker-debugsource amzn 2023 | 25.0.14-1.amzn2023.0.6 | [ALAS2023-2026-1736](https://patchblox.com/security/data/fix/linux/alas2023-2026-1736.md) | May 25, 2026 |
| Linux | ecs-init amzn 2023 | 1.103.2-1.amzn2023 | [ALAS2023-2026-1771](https://patchblox.com/security/data/fix/linux/alas2023-2026-1771.md) | May 25, 2026 |
| Linux | flightctl RHEL 10 | 1.1.4-1.el10em | [RHSA-2026:68334](https://patchblox.com/security/data/fix/linux/rhsa-2026-68334.md) | Sep 17, 2026 |
| Linux | git-lfs amzn 2023 | 3.7.1-80.amzn2023 | [ALAS2023-2026-1722](https://patchblox.com/security/data/fix/linux/alas2023-2026-1722.md) | May 25, 2026 |
| Linux | git-lfs-debuginfo amzn 2023 | 3.7.1-80.amzn2023 | [ALAS2023-2026-1722](https://patchblox.com/security/data/fix/linux/alas2023-2026-1722.md) | May 25, 2026 |
| Linux | git-lfs-debugsource amzn 2023 | 3.7.1-80.amzn2023 | [ALAS2023-2026-1722](https://patchblox.com/security/data/fix/linux/alas2023-2026-1722.md) | May 25, 2026 |
| Linux | go-toolset RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | go-toolset RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | go-toolset almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | go-toolset almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | go-toolset ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | go-toolset ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | go-toolset ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21319-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21319-1.md) | Jul 13, 2026 |
| Linux | go1.25-openssl sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22638-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22638-1.md) | Jul 13, 2026 |
| Linux | go1.26-openssl opensuse-leap 16.0 | 1.26.4-160000.1.1 | [OPENSUSE-SU-2026:21254-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21254-1.md) | Jul 7, 2026 |
| Linux | go1.26-openssl sles 16.0 | 1.26.4-160000.1.1 | [SUSE-SU-2026:22572-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22572-1.md) | Jul 7, 2026 |
| Linux | golang RHEL 10 | 1.26.5-1.el10_0 | [RHSA-2026:49702](https://patchblox.com/security/data/fix/linux/rhsa-2026-49702.md) | May 27, 2026 |
| Linux | golang RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang rocky 10 | 0:1.26.3-4.el10_2 | [RLSA-2026:22120](https://patchblox.com/security/data/fix/linux/rlsa-2026-22120.md) | Aug 26, 2026 |
| Linux | golang rocky 8 | 0:1.25.10-1.module+el8.10.0+40200+0fd0f175 | [RLSA-2026:22112](https://patchblox.com/security/data/fix/linux/rlsa-2026-22112.md) | Aug 26, 2026 |
| Linux | golang rocky 9 | 0:1.26.3-1.el9_8 | [RLSA-2026:22121](https://patchblox.com/security/data/fix/linux/rlsa-2026-22121.md) | Aug 26, 2026 |
| Linux | golang-1.26 Debian 14 | 1.26.3-1 | [DEBIAN-CVE-2026-39820](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39820.md) | May 27, 2026 |
| Linux | golang-bin RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-bin RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-bin almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-bin almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-bin amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-bin ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-bin ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-bin ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-docs RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-docs RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-docs almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-docs almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-docs amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-docs ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-docs ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-docs ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-github-burntsushi-toml amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-debuginfo amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-debugsource amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-devel amzn 2023 | 1.5.0-1.amzn2023.0.1 | [ALAS2023-2026-1751](https://patchblox.com/security/data/fix/linux/alas2023-2026-1751.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-debuginfo amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-debugsource amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-burntsushi-toml-test-devel amzn 2023 | 0.2.0-8.amzn2023.0.3 | [ALAS2023-2026-1750](https://patchblox.com/security/data/fix/linux/alas2023-2026-1750.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-debuginfo amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-debugsource amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-github-cpuguy83-md2man-devel amzn 2023 | 2.0.2-24.amzn2023.0.7 | [ALAS2023-2026-1749](https://patchblox.com/security/data/fix/linux/alas2023-2026-1749.md) | May 25, 2026 |
| Linux | golang-misc RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-misc RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-misc almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-misc almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-misc amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-misc ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-misc ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-misc ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-race RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-race RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-race almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-race almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-race ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-race ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-race ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-shared amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-src RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-src RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-src almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-src almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-src amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-src ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-src ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-src ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golang-tests RHEL 8 | 0:1.25.10-1.module+el8.10.0+24308+5c4a16b7 | [RHSA-2026:22112](https://patchblox.com/security/data/fix/linux/rhsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-tests RHEL 9 | 0:1.26.3-1.el9_8 | [RHSA-2026:22121](https://patchblox.com/security/data/fix/linux/rhsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-tests almalinux 8 | 1.25.10-1.module_el8.10.0+4187+c45165c4 | [ALSA-2026:22112](https://patchblox.com/security/data/fix/linux/alsa-2026-22112.md) | Jun 1, 2026 |
| Linux | golang-tests almalinux 9 | 1.26.3-1.el9_8 | [ALSA-2026:22121](https://patchblox.com/security/data/fix/linux/alsa-2026-22121.md) | Jun 1, 2026 |
| Linux | golang-tests amzn 2023 | 1.25.10-1.amzn2023.0.1 | [ALAS2023-2026-1743](https://patchblox.com/security/data/fix/linux/alas2023-2026-1743.md) | May 25, 2026 |
| Linux | golang-tests ol 10 | 0:1.26.5-1.0.1.el10_2 | [ELSA-2026-22120](https://patchblox.com/security/data/fix/linux/elsa-2026-22120.md) | Jul 21, 2026 |
| Linux | golang-tests ol 8 | 0:1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb | [ELSA-2026-22112](https://patchblox.com/security/data/fix/linux/elsa-2026-22112.md) | Jun 2, 2026 |
| Linux | golang-tests ol 9 | 0:1.26.3-1.0.1.el9_8 | [ELSA-2026-22121](https://patchblox.com/security/data/fix/linux/elsa-2026-22121.md) | Jun 23, 2026 |
| Linux | golist amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | golist-debuginfo amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | golist-debugsource amzn 2023 | 0.10.4-12.amzn2023.0.9 | [ALAS2023-2026-1742](https://patchblox.com/security/data/fix/linux/alas2023-2026-1742.md) | May 25, 2026 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | grafana RHEL 10 | 10.2.6-26.el10_0 | [RHSA-2026:67517](https://patchblox.com/security/data/fix/linux/rhsa-2026-67517.md) | Jul 6, 2026 |
| Linux | grafana RHEL 8 | 0:9.2.10-33.el8_10 | [RHSA-2026:62407](https://patchblox.com/security/data/fix/linux/rhsa-2026-62407.md) | Sep 13, 2026 |
| Linux | grafana RHEL 9 | 0:10.2.6-23.el9_8.3 | [RHSA-2026:62406](https://patchblox.com/security/data/fix/linux/rhsa-2026-62406.md) | Sep 13, 2026 |
| Linux | grafana almalinux 10 | 10.2.6-28.el10_2.5 | [ALSA-2026:63022](https://patchblox.com/security/data/fix/linux/alsa-2026-63022.md) | Sep 3, 2026 |
| Linux | grafana almalinux 8 | 9.2.10-33.el8_10 | [ALSA-2026:62407](https://patchblox.com/security/data/fix/linux/alsa-2026-62407.md) | Sep 2, 2026 |
| Linux | grafana almalinux 9 | 10.2.6-23.el9_8.3 | [ALSA-2026:62406](https://patchblox.com/security/data/fix/linux/alsa-2026-62406.md) | Sep 2, 2026 |
| Linux | grafana ol 10 | 0:10.2.6-28.el10_2.5 | [ELSA-2026-63022-0](https://patchblox.com/security/data/fix/linux/elsa-2026-63022-0.md) | Sep 3, 2026 |
| Linux | grafana ol 8 | 0:9.2.10-33.0.1.el8_10 | [ELSA-2026-62407-0](https://patchblox.com/security/data/fix/linux/elsa-2026-62407-0.md) | Sep 2, 2026 |
| Linux | grafana ol 9 | 0:10.2.6-23.el9_8.3 | [ELSA-2026-62406-0](https://patchblox.com/security/data/fix/linux/elsa-2026-62406-0.md) | Sep 2, 2026 |
| Linux | grafana rocky 10 | 0:10.2.6-28.el10_2.5 | [RLSA-2026:63022](https://patchblox.com/security/data/fix/linux/rlsa-2026-63022.md) | Sep 4, 2026 |
| Linux | grafana rocky 8 | 0:9.2.10-33.el8_10 | [RLSA-2026:62407](https://patchblox.com/security/data/fix/linux/rlsa-2026-62407.md) | Sep 3, 2026 |
| Linux | grafana rocky 9 | 0:10.2.6-23.el9_8.3 | [RLSA-2026:62406](https://patchblox.com/security/data/fix/linux/rlsa-2026-62406.md) | Sep 3, 2026 |
| Linux | grafana-selinux RHEL 8 | 0:9.2.10-33.el8_10 | [RHSA-2026:62407](https://patchblox.com/security/data/fix/linux/rhsa-2026-62407.md) | Sep 13, 2026 |
| Linux | grafana-selinux RHEL 9 | 0:10.2.6-23.el9_8.3 | [RHSA-2026:62406](https://patchblox.com/security/data/fix/linux/rhsa-2026-62406.md) | Sep 13, 2026 |
| Linux | grafana-selinux almalinux 10 | 10.2.6-28.el10_2.5 | [ALSA-2026:63022](https://patchblox.com/security/data/fix/linux/alsa-2026-63022.md) | Sep 3, 2026 |
| Linux | grafana-selinux almalinux 8 | 9.2.10-33.el8_10 | [ALSA-2026:62407](https://patchblox.com/security/data/fix/linux/alsa-2026-62407.md) | Sep 2, 2026 |
| Linux | grafana-selinux almalinux 9 | 10.2.6-23.el9_8.3 | [ALSA-2026:62406](https://patchblox.com/security/data/fix/linux/alsa-2026-62406.md) | Sep 2, 2026 |
| Linux | grafana-selinux ol 10 | 0:10.2.6-28.el10_2.5 | [ELSA-2026-63022-0](https://patchblox.com/security/data/fix/linux/elsa-2026-63022-0.md) | Sep 3, 2026 |
| Linux | grafana-selinux ol 8 | 0:9.2.10-33.0.1.el8_10 | [ELSA-2026-62407-0](https://patchblox.com/security/data/fix/linux/elsa-2026-62407-0.md) | Sep 2, 2026 |
| Linux | grafana-selinux ol 9 | 0:10.2.6-23.el9_8.3 | [ELSA-2026-62406-0](https://patchblox.com/security/data/fix/linux/elsa-2026-62406-0.md) | Sep 2, 2026 |
| Linux | ignition RHEL 10 | 2.21.0-3.el10_0.4 | [RHSA-2026:65335](https://patchblox.com/security/data/fix/linux/rhsa-2026-65335.md) | Sep 10, 2026 |
| Linux | image-builder RHEL 10 | 52.1-1.el10_2.2 | [RHSA-2026:65534](https://patchblox.com/security/data/fix/linux/rhsa-2026-65534.md) | Sep 10, 2026 |
| Linux | image-builder RHEL 9 | 0:52.1-1.el9_8.2 | [RHSA-2026:65886](https://patchblox.com/security/data/fix/linux/rhsa-2026-65886.md) | Sep 13, 2026 |
| Linux | image-builder ol 10 | 0:72.0.0-1.0.2.el10 | [ELSA-2026-65534-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65534-0.md) | Sep 11, 2026 |
| Linux | image-builder ol 9 | 0:72.0.0-1.0.2.el9 | [ELSA-2026-65886-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65886-0.md) | Sep 11, 2026 |
| Linux | image-builder rocky 10 | 0:52.1-1.el10_2.2.rocky.0.1 | [RLSA-2026:65534](https://patchblox.com/security/data/fix/linux/rlsa-2026-65534.md) | Sep 9, 2026 |
| Linux | image-builder rocky 9 | 0:52.1-1.el9_8.2 | [RLSA-2026:65886](https://patchblox.com/security/data/fix/linux/rlsa-2026-65886.md) | Sep 10, 2026 |
| Linux | libcap amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-debuginfo amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-debugsource amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-devel amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | libcap-static amzn 2023 | 2.73-1.amzn2023.0.7 | [ALAS2023-2026-1721](https://patchblox.com/security/data/fix/linux/alas2023-2026-1721.md) | May 25, 2026 |
| Linux | nerdctl amzn 2023 | 2.2.2-1.amzn2023.0.2 | [ALAS2023-2026-1735](https://patchblox.com/security/data/fix/linux/alas2023-2026-1735.md) | May 25, 2026 |
| Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.11 | [ALAS2023-2026-1739](https://patchblox.com/security/data/fix/linux/alas2023-2026-1739.md) | May 25, 2026 |
| Linux | opentelemetry-collector RHEL 10 | 0.152.1-2.el10_0 | [RHSA-2026:67974](https://patchblox.com/security/data/fix/linux/rhsa-2026-67974.md) | Sep 10, 2026 |
| Linux | opentelemetry-collector RHEL 9 | 0:0.152.1-2.el9_8 | [RHSA-2026:65117](https://patchblox.com/security/data/fix/linux/rhsa-2026-65117.md) | Sep 13, 2026 |
| Linux | opentelemetry-collector almalinux 10 | 0.152.1-2.el10_2 | [ALSA-2026:65116](https://patchblox.com/security/data/fix/linux/alsa-2026-65116.md) | Sep 8, 2026 |
| Linux | opentelemetry-collector almalinux 9 | 0.152.1-2.el9_8 | [ALSA-2026:65117](https://patchblox.com/security/data/fix/linux/alsa-2026-65117.md) | Sep 8, 2026 |
| Linux | opentelemetry-collector rocky 10 | 0:0.152.1-2.el10_2 | [RLSA-2026:65116](https://patchblox.com/security/data/fix/linux/rlsa-2026-65116.md) | Sep 9, 2026 |
| Linux | opentelemetry-collector rocky 9 | 0:0.152.1-2.el9_8 | [RLSA-2026:65117](https://patchblox.com/security/data/fix/linux/rlsa-2026-65117.md) | Sep 9, 2026 |
| Linux | osbuild-composer RHEL 10 | 134.1-12.el10_0 | [RHSA-2026:66327](https://patchblox.com/security/data/fix/linux/rhsa-2026-66327.md) | Sep 10, 2026 |
| Linux | osbuild-composer RHEL 8 | 0:101.5-2.el8_10 | [RHSA-2026:66016](https://patchblox.com/security/data/fix/linux/rhsa-2026-66016.md) | Sep 13, 2026 |
| Linux | osbuild-composer RHEL 9 | 0:165.1-4.el9_8.1 | [RHSA-2026:65153](https://patchblox.com/security/data/fix/linux/rhsa-2026-65153.md) | Sep 13, 2026 |
| Linux | osbuild-composer almalinux 8 | 101.5-2.el8_10.alma.1 | [ALSA-2026:66016](https://patchblox.com/security/data/fix/linux/alsa-2026-66016.md) | Sep 9, 2026 |
| Linux | osbuild-composer almalinux 9 | 165.1-4.el9_8.1.alma.1 | [ALSA-2026:65153](https://patchblox.com/security/data/fix/linux/alsa-2026-65153.md) | Sep 8, 2026 |
| Linux | osbuild-composer ol 10 | 0:176-1.0.2.el10_2 | [ELSA-2026-65895-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65895-0.md) | Sep 11, 2026 |
| Linux | osbuild-composer ol 9 | 0:175-1.0.2.el9_8 | [ELSA-2026-65153-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65153-0.md) | Sep 11, 2026 |
| Linux | osbuild-composer rocky 10 | 0:165.1-3.el10_2.2.rocky.0.1 | [RLSA-2026:65895](https://patchblox.com/security/data/fix/linux/rlsa-2026-65895.md) | Sep 10, 2026 |
| Linux | osbuild-composer rocky 8 | 0:101.5-2.el8_10.rocky.0.6 | [RLSA-2026:66016](https://patchblox.com/security/data/fix/linux/rlsa-2026-66016.md) | Sep 10, 2026 |
| Linux | osbuild-composer rocky 9 | 0:165.1-4.el9_8.1.rocky.0.1 | [RLSA-2026:65153](https://patchblox.com/security/data/fix/linux/rlsa-2026-65153.md) | Sep 9, 2026 |
| Linux | osbuild-composer-core RHEL 8 | 0:101.5-2.el8_10 | [RHSA-2026:66016](https://patchblox.com/security/data/fix/linux/rhsa-2026-66016.md) | Sep 13, 2026 |
| Linux | osbuild-composer-core RHEL 9 | 0:165.1-4.el9_8.1 | [RHSA-2026:65153](https://patchblox.com/security/data/fix/linux/rhsa-2026-65153.md) | Sep 13, 2026 |
| Linux | osbuild-composer-core almalinux 8 | 101.5-2.el8_10.alma.1 | [ALSA-2026:66016](https://patchblox.com/security/data/fix/linux/alsa-2026-66016.md) | Sep 9, 2026 |
| Linux | osbuild-composer-core almalinux 9 | 165.1-4.el9_8.1.alma.1 | [ALSA-2026:65153](https://patchblox.com/security/data/fix/linux/alsa-2026-65153.md) | Sep 8, 2026 |
| Linux | osbuild-composer-core ol 10 | 0:176-1.0.2.el10_2 | [ELSA-2026-65895-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65895-0.md) | Sep 11, 2026 |
| Linux | osbuild-composer-core ol 9 | 0:175-1.0.2.el9_8 | [ELSA-2026-65153-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65153-0.md) | Sep 11, 2026 |
| Linux | osbuild-composer-worker RHEL 8 | 0:101.5-2.el8_10 | [RHSA-2026:66016](https://patchblox.com/security/data/fix/linux/rhsa-2026-66016.md) | Sep 13, 2026 |
| Linux | osbuild-composer-worker RHEL 9 | 0:165.1-4.el9_8.1 | [RHSA-2026:65153](https://patchblox.com/security/data/fix/linux/rhsa-2026-65153.md) | Sep 13, 2026 |
| Linux | osbuild-composer-worker almalinux 8 | 101.5-2.el8_10.alma.1 | [ALSA-2026:66016](https://patchblox.com/security/data/fix/linux/alsa-2026-66016.md) | Sep 9, 2026 |
| Linux | osbuild-composer-worker almalinux 9 | 165.1-4.el9_8.1.alma.1 | [ALSA-2026:65153](https://patchblox.com/security/data/fix/linux/alsa-2026-65153.md) | Sep 8, 2026 |
| Linux | osbuild-composer-worker ol 10 | 0:176-1.0.2.el10_2 | [ELSA-2026-65895-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65895-0.md) | Sep 11, 2026 |
| Linux | osbuild-composer-worker ol 9 | 0:175-1.0.2.el9_8 | [ELSA-2026-65153-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65153-0.md) | Sep 11, 2026 |
| Linux | rclone amzn 2023 | 1.73.5-76.amzn2023 | [ALAS2023-2026-1717](https://patchblox.com/security/data/fix/linux/alas2023-2026-1717.md) | May 25, 2026 |
| Linux | rclone-debuginfo amzn 2023 | 1.73.5-76.amzn2023 | [ALAS2023-2026-1717](https://patchblox.com/security/data/fix/linux/alas2023-2026-1717.md) | May 25, 2026 |
| Linux | rclone-debugsource amzn 2023 | 1.73.5-76.amzn2023 | [ALAS2023-2026-1717](https://patchblox.com/security/data/fix/linux/alas2023-2026-1717.md) | May 25, 2026 |
| Linux | runc amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runc-debuginfo amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runc-debugsource amzn 2023 | 1.3.4-5.amzn2023.0.2 | [ALAS2023-2026-1715](https://patchblox.com/security/data/fix/linux/alas2023-2026-1715.md) | May 25, 2026 |
| Linux | runfinch-finch amzn 2023 | 1.17.0-1.amzn2023.0.2 | [ALAS2023-2026-1741](https://patchblox.com/security/data/fix/linux/alas2023-2026-1741.md) | May 25, 2026 |
| Linux | soci-snapshotter amzn 2023 | 0.13.0-1.amzn2023.0.3 | [ALAS2023-2026-1740](https://patchblox.com/security/data/fix/linux/alas2023-2026-1740.md) | May 25, 2026 |
| Linux | yq amzn 2023 | 4.47.1-13.amzn2023 | [ALAS2023-2026-1716](https://patchblox.com/security/data/fix/linux/alas2023-2026-1716.md) | May 25, 2026 |
| Linux | yq-debuginfo amzn 2023 | 4.47.1-13.amzn2023 | [ALAS2023-2026-1716](https://patchblox.com/security/data/fix/linux/alas2023-2026-1716.md) | May 25, 2026 |
| Linux | yq-debugsource amzn 2023 | 4.47.1-13.amzn2023 | [ALAS2023-2026-1716](https://patchblox.com/security/data/fix/linux/alas2023-2026-1716.md) | May 25, 2026 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.