# CVE-2026-42505: Invoking Encrypted Client Hello privacy leak in crypto/tls

CVE-2026-42505 is fixed in 59 products on 2 platforms, first by ALSA-2026:37436, released July 9, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-42505
- Priority: Routine
- CVSS: 5.3 (Moderate)
- EPSS: 0.0038
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 8, 2026
- Weakness: Insertion of Sensitive Information Into Sent Data
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42505

## Description

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Go Programming Language | 1.27.3 | [Go Programming Language 1.27.3](https://patchblox.com/security/data/fix/windows-app/golang.go-1.27.3.md) | Oct 19, 2026 |
| Linux | amazon-cloudwatch-agent amzn 2023 | 1.300069.1-1.amzn2023 | [ALAS2023-2026-2025](https://patchblox.com/security/data/fix/linux/alas2023-2026-2025.md) | Aug 3, 2026 |
| Linux | amazon-ecr-credential-helper amzn 2023 | 0.12.0-4.amzn2023 | [ALAS2023-2026-3180](https://patchblox.com/security/data/fix/linux/alas2023-2026-3180.md) | Nov 7, 2026 |
| Linux | amazon-ssm-agent amzn 2023 | 3.3.5226.0-1.amzn2023 | [ALAS2023-2026-3149](https://patchblox.com/security/data/fix/linux/alas2023-2026-3149.md) | Sep 30, 2026 |
| Linux | compat-golang-github-cpuguy83-md2man-2-devel amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 |
| Linux | containerd amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 |
| Linux | containerd-debuginfo amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 |
| Linux | containerd-debugsource amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 |
| Linux | containerd-stress amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 |
| Linux | containerd-stress-debuginfo amzn 2023 | 2.2.7-1.amzn2023.0.1 | [ALAS2023-2026-2131](https://patchblox.com/security/data/fix/linux/alas2023-2026-2131.md) | Sep 9, 2026 |
| Linux | credentials-fetcher amzn 2023 | 2.0.3-1.amzn2023.0.2 | [ALAS2023-2026-1975](https://patchblox.com/security/data/fix/linux/alas2023-2026-1975.md) | Jul 20, 2026 |
| Linux | delve RHEL 8 | 0:1.26.1-1.module+el8.10.0+24516+40554724 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | delve almalinux 8 | 1.26.1-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | docker amzn 2023 | 25.0.16-1.amzn2023.0.5 | [ALAS2023-2026-3205](https://patchblox.com/security/data/fix/linux/alas2023-2026-3205.md) | Nov 7, 2026 |
| Linux | docker-debuginfo amzn 2023 | 25.0.16-1.amzn2023.0.5 | [ALAS2023-2026-3205](https://patchblox.com/security/data/fix/linux/alas2023-2026-3205.md) | Nov 7, 2026 |
| Linux | docker-debugsource amzn 2023 | 25.0.16-1.amzn2023.0.5 | [ALAS2023-2026-3205](https://patchblox.com/security/data/fix/linux/alas2023-2026-3205.md) | Nov 7, 2026 |
| Linux | git-lfs RHEL 9 | 0:3.7.1-4.el9_8.3 | [RHSA-2026:66364](https://patchblox.com/security/data/fix/linux/rhsa-2026-66364.md) | Sep 13, 2026 |
| Linux | git-lfs almalinux 9 | 3.7.1-4.el9_8.3 | [ALSA-2026:66364](https://patchblox.com/security/data/fix/linux/alsa-2026-66364.md) | Sep 10, 2026 |
| Linux | go-toolset RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | go-toolset RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | go-toolset almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | go-toolset almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | go-toolset almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | go1.25 opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21324-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21324-1.md) | Jul 13, 2026 |
| Linux | go1.25 sles 15.6 | 1.25.12-150000.1.44.1 | [SUSE-SU-2026:2817-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2817-1.md) | Jul 9, 2026 |
| Linux | go1.25 sles 15.7 | 1.25.12-150000.1.44.1 | [SUSE-SU-2026:2817-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2817-1.md) | Jul 9, 2026 |
| Linux | go1.25 sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22643-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22643-1.md) | Jul 13, 2026 |
| Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.12-160000.1.1 | [OPENSUSE-SU-2026:21319-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21319-1.md) | Jul 13, 2026 |
| Linux | go1.25-openssl sles 15.6 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 |
| Linux | go1.25-openssl sles 15.7 | 1.25.12-150600.13.21.1 | [SUSE-SU-2026:3151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3151-1.md) | Jul 21, 2026 |
| Linux | go1.25-openssl sles 16.0 | 1.25.12-160000.1.1 | [SUSE-SU-2026:22638-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22638-1.md) | Jul 13, 2026 |
| Linux | go1.26 opensuse-leap 16.0 | 1.26.5-160000.1.1 | [OPENSUSE-SU-2026:21341-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21341-1.md) | Jul 14, 2026 |
| Linux | go1.26 sles 15.6 | 1.26.5-150000.1.18.1 | [SUSE-SU-2026:2818-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2818-1.md) | Jul 9, 2026 |
| Linux | go1.26 sles 15.7 | 1.26.5-150000.1.18.1 | [SUSE-SU-2026:2818-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2818-1.md) | Jul 9, 2026 |
| Linux | go1.26 sles 16.0 | 1.26.5-160000.1.1 | [SUSE-SU-2026:22656-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22656-1.md) | Jul 14, 2026 |
| Linux | go1.26-openssl opensuse-leap 16.0 | 1.26.5-160000.1.1 | [OPENSUSE-SU-2026:21321-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21321-1.md) | Jul 13, 2026 |
| Linux | go1.26-openssl sles 15.6 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 |
| Linux | go1.26-openssl sles 15.7 | 1.26.5-150600.13.9.1 | [SUSE-SU-2026:3102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3102-1.md) | Jul 17, 2026 |
| Linux | go1.26-openssl sles 16.0 | 1.26.5-160000.1.1 | [SUSE-SU-2026:22641-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22641-1.md) | Jul 13, 2026 |
| Linux | golang RHEL 10 | 1.26.5-1.el10_2 | [RHSA-2026:37436](https://patchblox.com/security/data/fix/linux/rhsa-2026-37436.md) | Aug 1, 2026 |
| Linux | golang RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | golang almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | golang almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | golang amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 |
| Linux | golang-1.26 Debian 14 | 1.26.5-1 | [DEBIAN-CVE-2026-42505](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42505.md) | Jul 10, 2026 |
| Linux | golang-1.27 Debian 14 | 1.27~rc2-1 | [DEBIAN-CVE-2026-42505](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42505.md) | Jul 10, 2026 |
| Linux | golang-bin RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-bin RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | golang-bin almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | golang-bin almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-bin almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | golang-bin amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 |
| Linux | golang-docs RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-docs RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | golang-docs almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | golang-docs almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-docs almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | golang-docs amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml-debuginfo amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml-debugsource amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml-devel amzn 2023 | 1.5.0-1.amzn2023.0.3 | [ALAS2023-2026-1978](https://patchblox.com/security/data/fix/linux/alas2023-2026-1978.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml-test amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml-test-debuginfo amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml-test-debugsource amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 |
| Linux | golang-github-burntsushi-toml-test-devel amzn 2023 | 0.2.0-8.amzn2023.0.5 | [ALAS2023-2026-1977](https://patchblox.com/security/data/fix/linux/alas2023-2026-1977.md) | Jul 20, 2026 |
| Linux | golang-github-cpuguy83-md2man amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 |
| Linux | golang-github-cpuguy83-md2man-debuginfo amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 |
| Linux | golang-github-cpuguy83-md2man-debugsource amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 |
| Linux | golang-github-cpuguy83-md2man-devel amzn 2023 | 2.0.2-24.amzn2023.0.9 | [ALAS2023-2026-1989](https://patchblox.com/security/data/fix/linux/alas2023-2026-1989.md) | Jul 20, 2026 |
| Linux | golang-misc RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-misc RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | golang-misc almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | golang-misc almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-misc almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | golang-misc amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 |
| Linux | golang-race RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-race RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | golang-race almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | golang-race almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-race almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | golang-shared amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 |
| Linux | golang-src RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-src RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | golang-src almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | golang-src almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-src almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | golang-src amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 |
| Linux | golang-tests RHEL 8 | 0:1.26.5-1.module+el8.10.0+24506+6809f2d9 | [RHSA-2026:38995](https://patchblox.com/security/data/fix/linux/rhsa-2026-38995.md) | Jul 14, 2026 |
| Linux | golang-tests RHEL 9 | 0:1.26.5-1.el9_8 | [RHSA-2026:37435](https://patchblox.com/security/data/fix/linux/rhsa-2026-37435.md) | Jul 11, 2026 |
| Linux | golang-tests almalinux 10 | 1.26.5-1.el10_2.alma.1 | [ALSA-2026:37436](https://patchblox.com/security/data/fix/linux/alsa-2026-37436.md) | Jul 9, 2026 |
| Linux | golang-tests almalinux 8 | 1.26.5-1.module_el8.10.0+4223+bd807c2e | [ALSA-2026:38995](https://patchblox.com/security/data/fix/linux/alsa-2026-38995.md) | Jul 13, 2026 |
| Linux | golang-tests almalinux 9 | 1.26.5-1.el9_8 | [ALSA-2026:37435](https://patchblox.com/security/data/fix/linux/alsa-2026-37435.md) | Jul 9, 2026 |
| Linux | golang-tests amzn 2023 | 1.25.12-1.amzn2023.0.1 | [ALAS2023-2026-1979](https://patchblox.com/security/data/fix/linux/alas2023-2026-1979.md) | Jul 20, 2026 |
| Linux | golist amzn 2023 | 0.10.4-12.amzn2023.0.11 | [ALAS2023-2026-1976](https://patchblox.com/security/data/fix/linux/alas2023-2026-1976.md) | Jul 20, 2026 |
| Linux | golist-debuginfo amzn 2023 | 0.10.4-12.amzn2023.0.11 | [ALAS2023-2026-1976](https://patchblox.com/security/data/fix/linux/alas2023-2026-1976.md) | Jul 20, 2026 |
| Linux | golist-debugsource amzn 2023 | 0.10.4-12.amzn2023.0.11 | [ALAS2023-2026-1976](https://patchblox.com/security/data/fix/linux/alas2023-2026-1976.md) | Jul 20, 2026 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | nerdctl amzn 2023 | 2.3.5-1.amzn2023.0.1 | [ALAS2023-2026-2129](https://patchblox.com/security/data/fix/linux/alas2023-2026-2129.md) | Aug 31, 2026 |
| Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.12 | [ALAS2023-2026-3206](https://patchblox.com/security/data/fix/linux/alas2023-2026-3206.md) | Nov 7, 2026 |
| Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.12 | [ALAS2023-2026-3206](https://patchblox.com/security/data/fix/linux/alas2023-2026-3206.md) | Nov 7, 2026 |
| Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.12 | [ALAS2023-2026-3206](https://patchblox.com/security/data/fix/linux/alas2023-2026-3206.md) | Nov 7, 2026 |
| Linux | rclone amzn 2023 | 1.75.1-1.amzn2023 | [ALAS2023-2026-3129](https://patchblox.com/security/data/fix/linux/alas2023-2026-3129.md) | Sep 28, 2026 |
| Linux | rclone-debuginfo amzn 2023 | 1.75.1-1.amzn2023 | [ALAS2023-2026-3129](https://patchblox.com/security/data/fix/linux/alas2023-2026-3129.md) | Sep 28, 2026 |
| Linux | rclone-debugsource amzn 2023 | 1.75.1-1.amzn2023 | [ALAS2023-2026-3129](https://patchblox.com/security/data/fix/linux/alas2023-2026-3129.md) | Sep 28, 2026 |
| Linux | runc amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 |
| Linux | runc-debuginfo amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 |
| Linux | runc-debugsource amzn 2023 | 1.3.6-1.amzn2023.0.1 | [ALAS2023-2026-2138](https://patchblox.com/security/data/fix/linux/alas2023-2026-2138.md) | Sep 14, 2026 |
| Linux | runfinch-finch amzn 2023 | 1.17.2-1.amzn2023.0.3 | [ALAS2023-2026-2023](https://patchblox.com/security/data/fix/linux/alas2023-2026-2023.md) | Aug 3, 2026 |
| Linux | soci-snapshotter amzn 2023 | 0.16.0-1.amzn2023.0.1 | [ALAS2023-2026-3153](https://patchblox.com/security/data/fix/linux/alas2023-2026-3153.md) | Nov 7, 2026 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.