# CVE-2026-42504: Quadratic complexity in WordDecoder.DecodeHeader in mime CVE-2026-42504 is fixed in 71 products on 2 platforms, first by Go Programming Language 1.26.4, released May 29, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-42504 - Priority: High - CVSS: 8.8 (Important) - EPSS: 0.0056 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jun 2, 2026 - Weakness: Inefficient Algorithmic Complexity - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42504 ## Description Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Windows apps | Go Programming Language | 1.26.4 | [Go Programming Language 1.26.4](https://patchblox.com/security/data/fix/windows-app/golang.go-1.26.4.md) | May 29, 2026 | | Linux | amazon-cloudwatch-agent amzn 2023 | 1.300069.1-1.amzn2023 | [ALAS2023-2026-2025](https://patchblox.com/security/data/fix/linux/alas2023-2026-2025.md) | Aug 3, 2026 | | Linux | compat-golang-github-cpuguy83-md2man-2-devel amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 | | Linux | containerd amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 | | Linux | containerd-debuginfo amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 | | Linux | containerd-debugsource amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 | | Linux | containerd-stress amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 | | Linux | containerd-stress-debuginfo amzn 2023 | 2.2.5-1.amzn2023.0.1 | [ALAS2023-2026-1909](https://patchblox.com/security/data/fix/linux/alas2023-2026-1909.md) | Jul 6, 2026 | | Linux | credentials-fetcher amzn 2023 | 2.0.3-1.amzn2023.0.1 | [ALAS2023-2026-1885](https://patchblox.com/security/data/fix/linux/alas2023-2026-1885.md) | Jun 22, 2026 | | Linux | delve RHEL 8 | 0:1.26.1-1.module+el8.10.0+24516+40554724 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | delve almalinux 8 | 1.26.1-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | docker amzn 2023 | 25.0.16-1.amzn2023.0.3 | [ALAS2023-2026-1901](https://patchblox.com/security/data/fix/linux/alas2023-2026-1901.md) | Jul 6, 2026 | | Linux | docker-debuginfo amzn 2023 | 25.0.16-1.amzn2023.0.3 | [ALAS2023-2026-1901](https://patchblox.com/security/data/fix/linux/alas2023-2026-1901.md) | Jul 6, 2026 | | Linux | docker-debugsource amzn 2023 | 25.0.16-1.amzn2023.0.3 | [ALAS2023-2026-1901](https://patchblox.com/security/data/fix/linux/alas2023-2026-1901.md) | Jul 6, 2026 | | Linux | ecs-init amzn 2023 | 1.105.0-1.amzn2023 | [ALAS2023-2026-1902](https://patchblox.com/security/data/fix/linux/alas2023-2026-1902.md) | Jul 6, 2026 | | Linux | flightctl RHEL 10 | 1.1.4-1.el10em | [RHSA-2026:68334](https://patchblox.com/security/data/fix/linux/rhsa-2026-68334.md) | Sep 17, 2026 | | Linux | go-fdo-client RHEL 10 | 1.0.0-4.el10_2.7 | [RHSA-2026:62577](https://patchblox.com/security/data/fix/linux/rhsa-2026-62577.md) | Sep 4, 2026 | | Linux | go-fdo-client almalinux 10 | 1.0.0-4.el10_2.7 | [ALSA-2026:62577](https://patchblox.com/security/data/fix/linux/alsa-2026-62577.md) | Sep 2, 2026 | | Linux | go-toolset RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | go-toolset RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | go-toolset almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | go-toolset almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | go-toolset almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | go1.25 opensuse-leap 16.0 | 1.25.11-160000.1.1 | [OPENSUSE-SU-2026:20977-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20977-1.md) | Jun 17, 2026 | | Linux | go1.25 sles 15.6 | 1.25.11-150000.1.41.1 | [SUSE-SU-2026:2326-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2326-1.md) | Jun 9, 2026 | | Linux | go1.25 sles 15.7 | 1.25.11-150000.1.41.1 | [SUSE-SU-2026:2326-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2326-1.md) | Jun 9, 2026 | | Linux | go1.25 sles 16.0 | 1.25.11-160000.1.1 | [SUSE-SU-2026:22155-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22155-1.md) | Jun 17, 2026 | | Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21319-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21319-1.md) | Jul 13, 2026 | | Linux | go1.25-openssl sles 15.6 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 | | Linux | go1.25-openssl sles 15.7 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 | | Linux | go1.25-openssl sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22638-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22638-1.md) | Jul 13, 2026 | | Linux | go1.26 opensuse-leap 16.0 | 1.26.4-160000.1.1 | [OPENSUSE-SU-2026:20976-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20976-1.md) | Jun 17, 2026 | | Linux | go1.26 sles 15.6 | 1.26.4-150000.1.15.1 | [SUSE-SU-2026:2327-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2327-1.md) | Jun 9, 2026 | | Linux | go1.26 sles 15.7 | 1.26.4-150000.1.15.1 | [SUSE-SU-2026:2327-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2327-1.md) | Jun 9, 2026 | | Linux | go1.26 sles 16.0 | 1.26.4-160000.1.1 | [SUSE-SU-2026:22154-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22154-1.md) | Jun 17, 2026 | | Linux | go1.26-openssl opensuse-leap 16.0 | 1.26.4-160000.1.1 | [OPENSUSE-SU-2026:21254-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21254-1.md) | Jul 7, 2026 | | Linux | go1.26-openssl sles 15.6 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 | | Linux | go1.26-openssl sles 15.7 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 | | Linux | go1.26-openssl sles 16.0 | 1.26.4-160000.1.1 | [SUSE-SU-2026:22572-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22572-1.md) | Jul 7, 2026 | | Linux | golang RHEL 10 | 1.26.7-1.el10_0 | [RHSA-2026:61882](https://patchblox.com/security/data/fix/linux/rhsa-2026-61882.md) | Aug 1, 2026 | | Linux | golang RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | golang almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | golang almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | golang amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 | | Linux | golang-1.26 Debian 14 | 1.26.4-1 | [DEBIAN-CVE-2026-42504](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42504.md) | Jun 24, 2026 | | Linux | golang-bin RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-bin RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | golang-bin almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | golang-bin almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-bin almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | golang-bin amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 | | Linux | golang-docs RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-docs RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | golang-docs almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | golang-docs almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-docs almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | golang-docs amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml-debuginfo amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml-debugsource amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml-devel amzn 2023 | 1.5.0-1.amzn2023.0.2 | [ALAS2023-2026-1877](https://patchblox.com/security/data/fix/linux/alas2023-2026-1877.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml-test amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml-test-debuginfo amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml-test-debugsource amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 | | Linux | golang-github-burntsushi-toml-test-devel amzn 2023 | 0.2.0-8.amzn2023.0.4 | [ALAS2023-2026-1876](https://patchblox.com/security/data/fix/linux/alas2023-2026-1876.md) | Jun 22, 2026 | | Linux | golang-github-cpuguy83-md2man amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 | | Linux | golang-github-cpuguy83-md2man-debuginfo amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 | | Linux | golang-github-cpuguy83-md2man-debugsource amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 | | Linux | golang-github-cpuguy83-md2man-devel amzn 2023 | 2.0.2-24.amzn2023.0.8 | [ALAS2023-2026-1875](https://patchblox.com/security/data/fix/linux/alas2023-2026-1875.md) | Jun 22, 2026 | | Linux | golang-github-openprinting-ipp-usb RHEL 10 | 0.9.27-7.el10_2.3 | [RHSA-2026:62631](https://patchblox.com/security/data/fix/linux/rhsa-2026-62631.md) | Sep 4, 2026 | | Linux | golang-github-openprinting-ipp-usb rocky 10 | 0:0.9.27-7.el10_2.3 | [RLSA-2026:62631](https://patchblox.com/security/data/fix/linux/rlsa-2026-62631.md) | Sep 3, 2026 | | Linux | golang-misc RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-misc RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | golang-misc almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | golang-misc almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-misc almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | golang-misc amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 | | Linux | golang-race RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-race RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | golang-race almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | golang-race almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-race almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | golang-shared amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 | | Linux | golang-src RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-src RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | golang-src almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | golang-src almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-src almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | golang-src amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 | | Linux | golang-tests RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 | | Linux | golang-tests RHEL 9 | 0:1.26.4-1.el9_8 | [RHSA-2026:29981](https://patchblox.com/security/data/fix/linux/rhsa-2026-29981.md) | Jun 29, 2026 | | Linux | golang-tests almalinux 10 | 1.26.4-1.el10_2.alma.1 | [ALSA-2026:29980](https://patchblox.com/security/data/fix/linux/alsa-2026-29980.md) | Jun 25, 2026 | | Linux | golang-tests almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 | | Linux | golang-tests almalinux 9 | 1.26.4-1.el9_8 | [ALSA-2026:29981](https://patchblox.com/security/data/fix/linux/alsa-2026-29981.md) | Jun 25, 2026 | | Linux | golang-tests amzn 2023 | 1.25.11-1.amzn2023.0.1 | [ALAS2023-2026-1878](https://patchblox.com/security/data/fix/linux/alas2023-2026-1878.md) | Jun 22, 2026 | | Linux | golist amzn 2023 | 0.10.4-12.amzn2023.0.10 | [ALAS2023-2026-1874](https://patchblox.com/security/data/fix/linux/alas2023-2026-1874.md) | Jun 22, 2026 | | Linux | golist-debuginfo amzn 2023 | 0.10.4-12.amzn2023.0.10 | [ALAS2023-2026-1874](https://patchblox.com/security/data/fix/linux/alas2023-2026-1874.md) | Jun 22, 2026 | | Linux | golist-debugsource amzn 2023 | 0.10.4-12.amzn2023.0.10 | [ALAS2023-2026-1874](https://patchblox.com/security/data/fix/linux/alas2023-2026-1874.md) | Jun 22, 2026 | | Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 | | Linux | grafana RHEL 10 | 10.2.6-26.el10_0 | [RHSA-2026:67517](https://patchblox.com/security/data/fix/linux/rhsa-2026-67517.md) | Jul 6, 2026 | | Linux | grafana RHEL 8 | 0:9.2.10-33.el8_10 | [RHSA-2026:62407](https://patchblox.com/security/data/fix/linux/rhsa-2026-62407.md) | Sep 13, 2026 | | Linux | grafana RHEL 9 | 0:10.2.6-23.el9_8.3 | [RHSA-2026:62406](https://patchblox.com/security/data/fix/linux/rhsa-2026-62406.md) | Sep 13, 2026 | | Linux | grafana almalinux 10 | 10.2.6-28.el10_2.5 | [ALSA-2026:63022](https://patchblox.com/security/data/fix/linux/alsa-2026-63022.md) | Sep 3, 2026 | | Linux | grafana almalinux 8 | 9.2.10-33.el8_10 | [ALSA-2026:62407](https://patchblox.com/security/data/fix/linux/alsa-2026-62407.md) | Sep 2, 2026 | | Linux | grafana almalinux 9 | 10.2.6-23.el9_8.3 | [ALSA-2026:62406](https://patchblox.com/security/data/fix/linux/alsa-2026-62406.md) | Sep 2, 2026 | | Linux | grafana-pcp RHEL 10 | 5.3.0-1.el10_0 | [RHSA-2026:56143](https://patchblox.com/security/data/fix/linux/rhsa-2026-56143.md) | Jun 2, 2026 | | Linux | grafana-pcp RHEL 8 | 0:5.1.1-18.el8_10 | [RHSA-2026:63124](https://patchblox.com/security/data/fix/linux/rhsa-2026-63124.md) | Sep 13, 2026 | | Linux | grafana-pcp almalinux 10 | 5.3.0-8.el10_2.1 | [ALSA-2026:63119](https://patchblox.com/security/data/fix/linux/alsa-2026-63119.md) | Sep 3, 2026 | | Linux | grafana-pcp almalinux 8 | 5.1.1-18.el8_10 | [ALSA-2026:63124](https://patchblox.com/security/data/fix/linux/alsa-2026-63124.md) | Sep 3, 2026 | | Linux | grafana-pcp ol 10 | 0:5.3.0-8.el10_2.1 | [ELSA-2026-63119-0](https://patchblox.com/security/data/fix/linux/elsa-2026-63119-0.md) | Sep 3, 2026 | | Linux | grafana-pcp ol 8 | 0:5.1.1-18.el8_10 | [ELSA-2026-63124-0](https://patchblox.com/security/data/fix/linux/elsa-2026-63124-0.md) | Sep 3, 2026 | | Linux | grafana-pcp rocky 10 | 0:5.3.0-8.el10_2.1 | [RLSA-2026:63119](https://patchblox.com/security/data/fix/linux/rlsa-2026-63119.md) | Sep 4, 2026 | | Linux | grafana-pcp rocky 8 | 0:5.1.1-18.el8_10 | [RLSA-2026:63124](https://patchblox.com/security/data/fix/linux/rlsa-2026-63124.md) | Sep 5, 2026 | | Linux | grafana-selinux RHEL 8 | 0:9.2.10-33.el8_10 | [RHSA-2026:62407](https://patchblox.com/security/data/fix/linux/rhsa-2026-62407.md) | Sep 13, 2026 | | Linux | grafana-selinux RHEL 9 | 0:10.2.6-23.el9_8.3 | [RHSA-2026:62406](https://patchblox.com/security/data/fix/linux/rhsa-2026-62406.md) | Sep 13, 2026 | | Linux | grafana-selinux almalinux 10 | 10.2.6-28.el10_2.5 | [ALSA-2026:63022](https://patchblox.com/security/data/fix/linux/alsa-2026-63022.md) | Sep 3, 2026 | | Linux | grafana-selinux almalinux 8 | 9.2.10-33.el8_10 | [ALSA-2026:62407](https://patchblox.com/security/data/fix/linux/alsa-2026-62407.md) | Sep 2, 2026 | | Linux | grafana-selinux almalinux 9 | 10.2.6-23.el9_8.3 | [ALSA-2026:62406](https://patchblox.com/security/data/fix/linux/alsa-2026-62406.md) | Sep 2, 2026 | | Linux | image-builder RHEL 10 | 52.1-1.el10_2.2 | [RHSA-2026:65534](https://patchblox.com/security/data/fix/linux/rhsa-2026-65534.md) | Sep 10, 2026 | | Linux | image-builder RHEL 9 | 0:52.1-1.el9_8.2 | [RHSA-2026:65886](https://patchblox.com/security/data/fix/linux/rhsa-2026-65886.md) | Sep 13, 2026 | | Linux | image-builder ol 10 | 0:72.0.0-1.0.2.el10 | [ELSA-2026-65534-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65534-0.md) | Sep 11, 2026 | | Linux | image-builder ol 9 | 0:72.0.0-1.0.2.el9 | [ELSA-2026-65886-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65886-0.md) | Sep 11, 2026 | | Linux | image-builder rocky 10 | 0:52.1-1.el10_2.2.rocky.0.1 | [RLSA-2026:65534](https://patchblox.com/security/data/fix/linux/rlsa-2026-65534.md) | Sep 9, 2026 | | Linux | image-builder rocky 9 | 0:52.1-1.el9_8.2 | [RLSA-2026:65886](https://patchblox.com/security/data/fix/linux/rlsa-2026-65886.md) | Sep 10, 2026 | | Linux | ipp-usb almalinux 10 | 0.9.27-7.el10_2.3 | [ALSA-2026:62631](https://patchblox.com/security/data/fix/linux/alsa-2026-62631.md) | Sep 2, 2026 | | Linux | ipp-usb ol 10 | 0:0.9.27-7.el10_2.3 | [ELSA-2026-62631-0](https://patchblox.com/security/data/fix/linux/elsa-2026-62631-0.md) | Sep 2, 2026 | | Linux | nerdctl amzn 2023 | 2.2.2-1.amzn2023.0.4 | [ALAS2023-2026-1908](https://patchblox.com/security/data/fix/linux/alas2023-2026-1908.md) | Jul 6, 2026 | | Linux | openshift RHEL 10 | 4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10 | [RHSA-2026:57456](https://patchblox.com/security/data/fix/linux/rhsa-2026-57456.md) | Jun 2, 2026 | | Linux | openshift-clients RHEL 10 | 4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10 | [RHSA-2026:66350](https://patchblox.com/security/data/fix/linux/rhsa-2026-66350.md) | Aug 13, 2026 | | Linux | opentelemetry-collector RHEL 10 | 0.152.1-2.el10_0 | [RHSA-2026:67974](https://patchblox.com/security/data/fix/linux/rhsa-2026-67974.md) | Sep 10, 2026 | | Linux | opentelemetry-collector RHEL 9 | 0:0.152.1-2.el9_8 | [RHSA-2026:65117](https://patchblox.com/security/data/fix/linux/rhsa-2026-65117.md) | Sep 13, 2026 | | Linux | opentelemetry-collector almalinux 10 | 0.152.1-2.el10_2 | [ALSA-2026:65116](https://patchblox.com/security/data/fix/linux/alsa-2026-65116.md) | Sep 8, 2026 | | Linux | opentelemetry-collector almalinux 9 | 0.152.1-2.el9_8 | [ALSA-2026:65117](https://patchblox.com/security/data/fix/linux/alsa-2026-65117.md) | Sep 8, 2026 | | Linux | opentelemetry-collector rocky 10 | 0:0.152.1-2.el10_2 | [RLSA-2026:65116](https://patchblox.com/security/data/fix/linux/rlsa-2026-65116.md) | Sep 9, 2026 | | Linux | opentelemetry-collector rocky 9 | 0:0.152.1-2.el9_8 | [RLSA-2026:65117](https://patchblox.com/security/data/fix/linux/rlsa-2026-65117.md) | Sep 9, 2026 | | Linux | osbuild-composer RHEL 10 | 134.1-12.el10_0 | [RHSA-2026:66327](https://patchblox.com/security/data/fix/linux/rhsa-2026-66327.md) | Sep 10, 2026 | | Linux | osbuild-composer RHEL 8 | 0:101.5-3.el8_10 | [RHSA-2026:67148](https://patchblox.com/security/data/fix/linux/rhsa-2026-67148.md) | Sep 19, 2026 | | Linux | osbuild-composer RHEL 9 | 0:165.1-4.el9_8.1 | [RHSA-2026:65153](https://patchblox.com/security/data/fix/linux/rhsa-2026-65153.md) | Sep 13, 2026 | | Linux | osbuild-composer almalinux 8 | 101.5-3.el8_10.alma.1 | [ALSA-2026:67148](https://patchblox.com/security/data/fix/linux/alsa-2026-67148.md) | Sep 14, 2026 | | Linux | osbuild-composer almalinux 9 | 165.1-4.el9_8.1.alma.1 | [ALSA-2026:65153](https://patchblox.com/security/data/fix/linux/alsa-2026-65153.md) | Sep 8, 2026 | | Linux | osbuild-composer ol 10 | 0:176-1.0.2.el10_2 | [ELSA-2026-65895-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65895-0.md) | Sep 11, 2026 | | Linux | osbuild-composer ol 8 | 0:101.5-3.0.1.el8_10 | [ELSA-2026-67148-0](https://patchblox.com/security/data/fix/linux/elsa-2026-67148-0.md) | Sep 28, 2026 | | Linux | osbuild-composer ol 9 | 0:175-1.0.2.el9_8 | [ELSA-2026-65153-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65153-0.md) | Sep 11, 2026 | | Linux | osbuild-composer rocky 10 | 0:165.1-3.el10_2.2.rocky.0.1 | [RLSA-2026:65895](https://patchblox.com/security/data/fix/linux/rlsa-2026-65895.md) | Sep 10, 2026 | | Linux | osbuild-composer rocky 8 | 0:101.5-3.el8_10.rocky.0.6 | [RLSA-2026:67148](https://patchblox.com/security/data/fix/linux/rlsa-2026-67148.md) | Sep 15, 2026 | | Linux | osbuild-composer rocky 9 | 0:165.1-4.el9_8.1.rocky.0.1 | [RLSA-2026:65153](https://patchblox.com/security/data/fix/linux/rlsa-2026-65153.md) | Sep 9, 2026 | | Linux | osbuild-composer-core RHEL 8 | 0:101.5-3.el8_10 | [RHSA-2026:67148](https://patchblox.com/security/data/fix/linux/rhsa-2026-67148.md) | Sep 19, 2026 | | Linux | osbuild-composer-core RHEL 9 | 0:165.1-4.el9_8.1 | [RHSA-2026:65153](https://patchblox.com/security/data/fix/linux/rhsa-2026-65153.md) | Sep 13, 2026 | | Linux | osbuild-composer-core almalinux 8 | 101.5-3.el8_10.alma.1 | [ALSA-2026:67148](https://patchblox.com/security/data/fix/linux/alsa-2026-67148.md) | Sep 14, 2026 | | Linux | osbuild-composer-core almalinux 9 | 165.1-4.el9_8.1.alma.1 | [ALSA-2026:65153](https://patchblox.com/security/data/fix/linux/alsa-2026-65153.md) | Sep 8, 2026 | | Linux | osbuild-composer-core ol 10 | 0:176-1.0.2.el10_2 | [ELSA-2026-65895-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65895-0.md) | Sep 11, 2026 | | Linux | osbuild-composer-core ol 8 | 0:101.5-3.0.1.el8_10 | [ELSA-2026-67148-0](https://patchblox.com/security/data/fix/linux/elsa-2026-67148-0.md) | Sep 28, 2026 | | Linux | osbuild-composer-core ol 9 | 0:175-1.0.2.el9_8 | [ELSA-2026-65153-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65153-0.md) | Sep 11, 2026 | | Linux | osbuild-composer-worker RHEL 8 | 0:101.5-3.el8_10 | [RHSA-2026:67148](https://patchblox.com/security/data/fix/linux/rhsa-2026-67148.md) | Sep 19, 2026 | | Linux | osbuild-composer-worker RHEL 9 | 0:165.1-4.el9_8.1 | [RHSA-2026:65153](https://patchblox.com/security/data/fix/linux/rhsa-2026-65153.md) | Sep 13, 2026 | | Linux | osbuild-composer-worker almalinux 8 | 101.5-3.el8_10.alma.1 | [ALSA-2026:67148](https://patchblox.com/security/data/fix/linux/alsa-2026-67148.md) | Sep 14, 2026 | | Linux | osbuild-composer-worker almalinux 9 | 165.1-4.el9_8.1.alma.1 | [ALSA-2026:65153](https://patchblox.com/security/data/fix/linux/alsa-2026-65153.md) | Sep 8, 2026 | | Linux | osbuild-composer-worker ol 10 | 0:176-1.0.2.el10_2 | [ELSA-2026-65895-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65895-0.md) | Sep 11, 2026 | | Linux | osbuild-composer-worker ol 8 | 0:101.5-3.0.1.el8_10 | [ELSA-2026-67148-0](https://patchblox.com/security/data/fix/linux/elsa-2026-67148-0.md) | Sep 28, 2026 | | Linux | osbuild-composer-worker ol 9 | 0:175-1.0.2.el9_8 | [ELSA-2026-65153-0](https://patchblox.com/security/data/fix/linux/elsa-2026-65153-0.md) | Sep 11, 2026 | | Linux | ose-azure-acr-image-credential-provider RHEL 10 | 4.21.0-202609221600.p2.g53d73b1.assembly.stream.el10 | [RHSA-2026:71443](https://patchblox.com/security/data/fix/linux/rhsa-2026-71443.md) | Aug 13, 2026 | | Linux | ose-crio-credential-provider RHEL 10 | 4.21.0-202609021357.p2.g83d4961.assembly.stream.el10 | [RHSA-2026:66350](https://patchblox.com/security/data/fix/linux/rhsa-2026-66350.md) | Aug 13, 2026 | | Linux | rclone opensuse-leap 16.0 | 1.74.4-bp160.1.1 | [OPENSUSE-SU-2026:21436-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21436-1.md) | Jul 22, 2026 | | Linux | receptor RHEL 10 | 1.6.7-1.el10ap | [RHSA-2026:50336](https://patchblox.com/security/data/fix/linux/rhsa-2026-50336.md) | Jun 2, 2026 | | Linux | rhc-worker-playbook RHEL 10 | 0.2.10-1.el10_2 | [RHSA-2026:42946](https://patchblox.com/security/data/fix/linux/rhsa-2026-42946.md) | Jun 2, 2026 | | Linux | runc amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 | | Linux | runc-debuginfo amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 | | Linux | runc-debugsource amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 | | Linux | runfinch-finch amzn 2023 | 1.17.1-1.amzn2023.0.3 | [ALAS2023-2026-1886](https://patchblox.com/security/data/fix/linux/alas2023-2026-1886.md) | Jun 22, 2026 | | Linux | soci-snapshotter amzn 2023 | 0.14.1-1.amzn2023.0.1 | [ALAS2023-2026-1884](https://patchblox.com/security/data/fix/linux/alas2023-2026-1884.md) | Jun 22, 2026 | | Linux | yggdrasil RHEL 10 | 0.4.9.2-1.el10_2.3 | [RHSA-2026:69308](https://patchblox.com/security/data/fix/linux/rhsa-2026-69308.md) | Aug 13, 2026 | | Linux | yggdrasil almalinux 10 | 0.4.9.2-1.el10_2.3 | [ALSA-2026:69308](https://patchblox.com/security/data/fix/linux/alsa-2026-69308.md) | Sep 21, 2026 | | Linux | yggdrasil ol 10 | 0:0.4.9.2-1.el10_2.3 | [ELSA-2026-69308](https://patchblox.com/security/data/fix/linux/elsa-2026-69308.md) | Sep 21, 2026 | | Linux | yggdrasil rocky 10 | 0:0.4.9.2-1.el10_2.3 | [RLSA-2026:69308](https://patchblox.com/security/data/fix/linux/rlsa-2026-69308.md) | Sep 22, 2026 | | Linux | yggdrasil-devel almalinux 10 | 0.4.9.2-1.el10_2.3 | [ALSA-2026:69308](https://patchblox.com/security/data/fix/linux/alsa-2026-69308.md) | Sep 21, 2026 | | Linux | yggdrasil-devel ol 10 | 0:0.4.9.2-1.el10_2.3 | [ELSA-2026-69308](https://patchblox.com/security/data/fix/linux/elsa-2026-69308.md) | Sep 21, 2026 | --- Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.