# CVE-2026-97031: Reject malformed ECH outer extension references in crypto/tls

CVE-2026-97031 is fixed in 26 products on 2 platforms, first by DEBIAN-CVE-2026-97031, released October 12, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-97031
- Priority: High
- CVSS: 7.5 (Important)
- EPSS: 0.0072
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 8, 2026
- Weakness: Asymmetric Resource Consumption (Amplification)
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97031

## Description

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Go Programming Language | 1.27.3 | [Go Programming Language 1.27.3](https://patchblox.com/security/data/fix/windows-app/golang.go-1.27.3.md) | Oct 19, 2026 |
| Linux | delve RHEL 10 | 1.26.1-3.el10_0 | [RHSA-2026:89884](https://patchblox.com/security/data/fix/linux/rhsa-2026-89884.md) | Oct 27, 2026 |
| Linux | delve RHEL 8 | 0:1.26.1-1.module+el8.10.0+24516+40554724 | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | delve almalinux 10 | 1.26.1-3.el10_2 | [ALSA-2026:95519](https://patchblox.com/security/data/fix/linux/alsa-2026-95519.md) | Nov 7, 2026 |
| Linux | delve almalinux 8 | 1.26.1-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | delve almalinux 9 | 1.26.1-2.el9_8 | [ALSA-2026:95518](https://patchblox.com/security/data/fix/linux/alsa-2026-95518.md) | Nov 7, 2026 |
| Linux | delve ol 10 | 0:1.26.1-3.0.1.el10_2 | [ELSA-2026-95519](https://patchblox.com/security/data/fix/linux/elsa-2026-95519.md) | Nov 7, 2026 |
| Linux | delve ol 8 | 0:1.26.1-1.0.1.module+el8.10.0+91008+b9491da4 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | delve ol 9 | 0:1.26.1-2.0.1.el9_8 | [ELSA-2026-95518](https://patchblox.com/security/data/fix/linux/elsa-2026-95518.md) | Nov 7, 2026 |
| Linux | delve rocky 10 | 0:1.26.1-3.el10_2 | [RLSA-2026:95519](https://patchblox.com/security/data/fix/linux/rlsa-2026-95519.md) | Nov 7, 2026 |
| Linux | delve rocky 8 | 0:1.26.1-1.module+el8.10.0+40244+e7cb3ff8 | [RLSA-2026:86203](https://patchblox.com/security/data/fix/linux/rlsa-2026-86203.md) | Nov 7, 2026 |
| Linux | delve rocky 9 | 0:1.26.1-2.el9_8 | [RLSA-2026:95518](https://patchblox.com/security/data/fix/linux/rlsa-2026-95518.md) | Nov 7, 2026 |
| Linux | go-toolset RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | go-toolset RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | go-toolset almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | go-toolset almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | go-toolset almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | go-toolset ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | go-toolset ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | go-toolset ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | go1.26 opensuse-leap 16.0 | 1.26.9-160000.1.1 | [OPENSUSE-SU-2026:22095-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22095-1.md) | Nov 7, 2026 |
| Linux | go1.26 sles 15.6 | 1.26.9-150000.1.33.1 | [SUSE-SU-2026:4629-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4629-1.md) | Nov 7, 2026 |
| Linux | go1.26 sles 15.7 | 1.26.9-150000.1.33.1 | [SUSE-SU-2026:4629-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4629-1.md) | Nov 7, 2026 |
| Linux | go1.26 sles 16.0 | 1.26.9-160000.1.1 | [SUSE-SU-2026:24239-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-24239-1.md) | Nov 7, 2026 |
| Linux | go1.26-openssl sles 15.6 | 1.26.10-150600.13.18.1 | [SUSE-SU-2026:4866-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4866-1.md) | Nov 7, 2026 |
| Linux | go1.26-openssl sles 15.7 | 1.26.10-150600.13.18.1 | [SUSE-SU-2026:4866-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4866-1.md) | Nov 7, 2026 |
| Linux | go1.27 opensuse-leap 16.0 | 1.27.2-160000.1.1 | [OPENSUSE-SU-2026:22093-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22093-1.md) | Nov 7, 2026 |
| Linux | go1.27 sles 15.6 | 1.27.2-150000.1.12.1 | [SUSE-SU-2026:4625-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4625-1.md) | Nov 7, 2026 |
| Linux | go1.27 sles 15.7 | 1.27.2-150000.1.12.1 | [SUSE-SU-2026:4625-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4625-1.md) | Nov 7, 2026 |
| Linux | go1.27 sles 16.0 | 1.27.2-160000.1.1 | [SUSE-SU-2026:24237-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-24237-1.md) | Nov 7, 2026 |
| Linux | golang RHEL 10 | 1.26.10-1.el10_0 | [RHSA-2026:87040](https://patchblox.com/security/data/fix/linux/rhsa-2026-87040.md) | Oct 21, 2026 |
| Linux | golang RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | golang RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | golang almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang amzn 2023 | 1.26.9-1.amzn2023.0.1 | [ALAS2023-2026-3225](https://patchblox.com/security/data/fix/linux/alas2023-2026-3225.md) | Nov 7, 2026 |
| Linux | golang ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang rocky 10 | 0:1.26.10-1.el10_2 | [RLSA-2026:86093](https://patchblox.com/security/data/fix/linux/rlsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang rocky 9 | 0:1.26.10-1.el9_8 | [RLSA-2026:86196](https://patchblox.com/security/data/fix/linux/rlsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-1.26 Debian 14 | 1.26.9-1 | [DEBIAN-CVE-2026-97031](https://patchblox.com/security/data/fix/linux/debian-cve-2026-97031.md) | Oct 12, 2026 |
| Linux | golang-1.27 Debian 14 | 1.27.2-1 | [DEBIAN-CVE-2026-97031](https://patchblox.com/security/data/fix/linux/debian-cve-2026-97031.md) | Oct 12, 2026 |
| Linux | golang-bin RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | golang-bin RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | golang-bin almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-bin almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-bin almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-bin amzn 2023 | 1.26.9-1.amzn2023.0.1 | [ALAS2023-2026-3225](https://patchblox.com/security/data/fix/linux/alas2023-2026-3225.md) | Nov 7, 2026 |
| Linux | golang-bin ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-bin ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-bin ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-docs RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | golang-docs RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | golang-docs almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-docs almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-docs almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-docs amzn 2023 | 1.26.9-1.amzn2023.0.1 | [ALAS2023-2026-3225](https://patchblox.com/security/data/fix/linux/alas2023-2026-3225.md) | Nov 7, 2026 |
| Linux | golang-docs ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-docs ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-docs ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-github-openprinting-ipp-usb RHEL 10 | 0.9.27-7.el10_2.4 | [RHSA-2026:88280](https://patchblox.com/security/data/fix/linux/rhsa-2026-88280.md) | Oct 24, 2026 |
| Linux | golang-github-openprinting-ipp-usb rocky 10 | 0:0.9.27-7.el10_2.4 | [RLSA-2026:88280](https://patchblox.com/security/data/fix/linux/rlsa-2026-88280.md) | Nov 7, 2026 |
| Linux | golang-misc RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | golang-misc RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | golang-misc almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-misc almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-misc almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-misc amzn 2023 | 1.26.9-1.amzn2023.0.1 | [ALAS2023-2026-3225](https://patchblox.com/security/data/fix/linux/alas2023-2026-3225.md) | Nov 7, 2026 |
| Linux | golang-misc ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-misc ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-misc ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-race RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | golang-race RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | golang-race almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-race almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-race almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-race ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-race ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-race ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-shared amzn 2023 | 1.26.9-1.amzn2023.0.1 | [ALAS2023-2026-3225](https://patchblox.com/security/data/fix/linux/alas2023-2026-3225.md) | Nov 7, 2026 |
| Linux | golang-src RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | golang-src RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | golang-src almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-src almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-src almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-src amzn 2023 | 1.26.9-1.amzn2023.0.1 | [ALAS2023-2026-3225](https://patchblox.com/security/data/fix/linux/alas2023-2026-3225.md) | Nov 7, 2026 |
| Linux | golang-src ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-src ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-src ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-tests RHEL 8 | 0:1.26.10-1.module+el8.10.0+25107+6b50279c | [RHSA-2026:86203](https://patchblox.com/security/data/fix/linux/rhsa-2026-86203.md) | Oct 21, 2026 |
| Linux | golang-tests RHEL 9 | 0:1.26.10-1.el9_8 | [RHSA-2026:86196](https://patchblox.com/security/data/fix/linux/rhsa-2026-86196.md) | Oct 21, 2026 |
| Linux | golang-tests almalinux 10 | 1.26.10-1.el10_2.alma.1 | [ALSA-2026:86093](https://patchblox.com/security/data/fix/linux/alsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-tests almalinux 8 | 1.26.10-1.module_el8.10.0+4307+6e4cbc60 | [ALSA-2026:86203](https://patchblox.com/security/data/fix/linux/alsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-tests almalinux 9 | 1.26.10-1.el9_8 | [ALSA-2026:86196](https://patchblox.com/security/data/fix/linux/alsa-2026-86196.md) | Nov 7, 2026 |
| Linux | golang-tests amzn 2023 | 1.26.9-1.amzn2023.0.1 | [ALAS2023-2026-3225](https://patchblox.com/security/data/fix/linux/alas2023-2026-3225.md) | Nov 7, 2026 |
| Linux | golang-tests ol 10 | 0:1.26.10-1.0.1.el10_2 | [ELSA-2026-86093](https://patchblox.com/security/data/fix/linux/elsa-2026-86093.md) | Nov 7, 2026 |
| Linux | golang-tests ol 8 | 0:1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 | [ELSA-2026-86203](https://patchblox.com/security/data/fix/linux/elsa-2026-86203.md) | Nov 7, 2026 |
| Linux | golang-tests ol 9 | 0:1.26.10-1.0.1.el9_8 | [ELSA-2026-86196](https://patchblox.com/security/data/fix/linux/elsa-2026-86196.md) | Nov 7, 2026 |
| Linux | grafana RHEL 10 | 10.2.6-27.el10_0 | [RHSA-2026:88397](https://patchblox.com/security/data/fix/linux/rhsa-2026-88397.md) | Oct 24, 2026 |
| Linux | grafana RHEL 8 | 0:9.2.10-36.el8_10 | [RHSA-2026:88188](https://patchblox.com/security/data/fix/linux/rhsa-2026-88188.md) | Oct 24, 2026 |
| Linux | grafana RHEL 9 | 0:10.2.6-23.el9_8.7 | [RHSA-2026:89744](https://patchblox.com/security/data/fix/linux/rhsa-2026-89744.md) | Oct 27, 2026 |
| Linux | grafana almalinux 8 | 9.2.10-36.el8_10 | [ALSA-2026:88188](https://patchblox.com/security/data/fix/linux/alsa-2026-88188.md) | Nov 7, 2026 |
| Linux | grafana almalinux 9 | 10.2.6-23.el9_8.7 | [ALSA-2026:89744](https://patchblox.com/security/data/fix/linux/alsa-2026-89744.md) | Nov 7, 2026 |
| Linux | grafana ol 10 | 0:10.2.6-28.el10_2.9 | [ELSA-2026-89751](https://patchblox.com/security/data/fix/linux/elsa-2026-89751.md) | Nov 7, 2026 |
| Linux | grafana ol 8 | 0:9.2.10-36.0.1.el8_10 | [ELSA-2026-88188](https://patchblox.com/security/data/fix/linux/elsa-2026-88188.md) | Nov 7, 2026 |
| Linux | grafana ol 9 | 0:10.2.6-23.el9_8.7 | [ELSA-2026-89744](https://patchblox.com/security/data/fix/linux/elsa-2026-89744.md) | Nov 7, 2026 |
| Linux | grafana rocky 8 | 0:9.2.10-36.el8_10 | [RLSA-2026:88188](https://patchblox.com/security/data/fix/linux/rlsa-2026-88188.md) | Nov 7, 2026 |
| Linux | grafana rocky 9 | 0:10.2.6-23.el9_8.7 | [RLSA-2026:89744](https://patchblox.com/security/data/fix/linux/rlsa-2026-89744.md) | Nov 7, 2026 |
| Linux | grafana-pcp RHEL 10 | 5.3.0-1.el10_0.2 | [RHSA-2026:88317](https://patchblox.com/security/data/fix/linux/rhsa-2026-88317.md) | Oct 24, 2026 |
| Linux | grafana-pcp RHEL 8 | 0:5.1.1-19.el8_10 | [RHSA-2026:88189](https://patchblox.com/security/data/fix/linux/rhsa-2026-88189.md) | Oct 24, 2026 |
| Linux | grafana-pcp RHEL 9 | 0:5.1.1-17.el9_8.2 | [RHSA-2026:88354](https://patchblox.com/security/data/fix/linux/rhsa-2026-88354.md) | Oct 24, 2026 |
| Linux | grafana-pcp almalinux 10 | 5.3.0-8.el10_2.2 | [ALSA-2026:88316](https://patchblox.com/security/data/fix/linux/alsa-2026-88316.md) | Nov 7, 2026 |
| Linux | grafana-pcp almalinux 8 | 5.1.1-19.el8_10 | [ALSA-2026:88189](https://patchblox.com/security/data/fix/linux/alsa-2026-88189.md) | Nov 7, 2026 |
| Linux | grafana-pcp almalinux 9 | 5.1.1-17.el9_8.2 | [ALSA-2026:88354](https://patchblox.com/security/data/fix/linux/alsa-2026-88354.md) | Nov 7, 2026 |
| Linux | grafana-pcp ol 10 | 0:5.3.0-8.el10_2.2 | [ELSA-2026-88316](https://patchblox.com/security/data/fix/linux/elsa-2026-88316.md) | Nov 7, 2026 |
| Linux | grafana-pcp ol 8 | 0:5.1.1-19.el8_10 | [ELSA-2026-88189](https://patchblox.com/security/data/fix/linux/elsa-2026-88189.md) | Nov 7, 2026 |
| Linux | grafana-pcp ol 9 | 0:5.1.1-17.el9_8.2 | [ELSA-2026-88354](https://patchblox.com/security/data/fix/linux/elsa-2026-88354.md) | Nov 7, 2026 |
| Linux | grafana-pcp rocky 10 | 0:5.3.0-8.el10_2.2 | [RLSA-2026:88316](https://patchblox.com/security/data/fix/linux/rlsa-2026-88316.md) | Nov 7, 2026 |
| Linux | grafana-pcp rocky 8 | 0:5.1.1-19.el8_10 | [RLSA-2026:88189](https://patchblox.com/security/data/fix/linux/rlsa-2026-88189.md) | Nov 7, 2026 |
| Linux | grafana-pcp rocky 9 | 0:5.1.1-17.el9_8.2 | [RLSA-2026:88354](https://patchblox.com/security/data/fix/linux/rlsa-2026-88354.md) | Nov 7, 2026 |
| Linux | grafana-selinux RHEL 8 | 0:9.2.10-36.el8_10 | [RHSA-2026:88188](https://patchblox.com/security/data/fix/linux/rhsa-2026-88188.md) | Oct 24, 2026 |
| Linux | grafana-selinux RHEL 9 | 0:10.2.6-23.el9_8.7 | [RHSA-2026:89744](https://patchblox.com/security/data/fix/linux/rhsa-2026-89744.md) | Oct 27, 2026 |
| Linux | grafana-selinux almalinux 8 | 9.2.10-36.el8_10 | [ALSA-2026:88188](https://patchblox.com/security/data/fix/linux/alsa-2026-88188.md) | Nov 7, 2026 |
| Linux | grafana-selinux almalinux 9 | 10.2.6-23.el9_8.7 | [ALSA-2026:89744](https://patchblox.com/security/data/fix/linux/alsa-2026-89744.md) | Nov 7, 2026 |
| Linux | grafana-selinux ol 10 | 0:10.2.6-28.el10_2.9 | [ELSA-2026-89751](https://patchblox.com/security/data/fix/linux/elsa-2026-89751.md) | Nov 7, 2026 |
| Linux | grafana-selinux ol 8 | 0:9.2.10-36.0.1.el8_10 | [ELSA-2026-88188](https://patchblox.com/security/data/fix/linux/elsa-2026-88188.md) | Nov 7, 2026 |
| Linux | grafana-selinux ol 9 | 0:10.2.6-23.el9_8.7 | [ELSA-2026-89744](https://patchblox.com/security/data/fix/linux/elsa-2026-89744.md) | Nov 7, 2026 |
| Linux | ipp-usb almalinux 10 | 0.9.27-7.el10_2.4 | [ALSA-2026:88280](https://patchblox.com/security/data/fix/linux/alsa-2026-88280.md) | Nov 7, 2026 |
| Linux | ipp-usb ol 10 | 0:0.9.27-7.el10_2.4 | [ELSA-2026-88280](https://patchblox.com/security/data/fix/linux/elsa-2026-88280.md) | Nov 7, 2026 |
| Linux | opentelemetry-collector RHEL 10 | 0.158.0-2.el10_0 | [RHSA-2026:95016](https://patchblox.com/security/data/fix/linux/rhsa-2026-95016.md) | Nov 3, 2026 |
| Linux | opentelemetry-collector RHEL 9 | 0:0.158.0-2.el9_8 | [RHSA-2026:93617](https://patchblox.com/security/data/fix/linux/rhsa-2026-93617.md) | Nov 3, 2026 |
| Linux | opentelemetry-collector almalinux 10 | 0.158.0-2.el10_2 | [ALSA-2026:93596](https://patchblox.com/security/data/fix/linux/alsa-2026-93596.md) | Nov 7, 2026 |
| Linux | opentelemetry-collector almalinux 9 | 0.158.0-2.el9_8 | [ALSA-2026:93617](https://patchblox.com/security/data/fix/linux/alsa-2026-93617.md) | Nov 7, 2026 |
| Linux | opentelemetry-collector rocky 10 | 0:0.158.0-2.el10_2 | [RLSA-2026:93596](https://patchblox.com/security/data/fix/linux/rlsa-2026-93596.md) | Nov 7, 2026 |
| Linux | opentelemetry-collector rocky 9 | 0:0.158.0-2.el9_8 | [RLSA-2026:93617](https://patchblox.com/security/data/fix/linux/rlsa-2026-93617.md) | Nov 7, 2026 |
| Linux | osbuild-composer RHEL 10 | 134.1-13.el10_0 | [RHSA-2026:91646](https://patchblox.com/security/data/fix/linux/rhsa-2026-91646.md) | Oct 29, 2026 |
| Linux | receptor RHEL 10 | 1.6.9-3.el10ap | [RHSA-2026:92622](https://patchblox.com/security/data/fix/linux/rhsa-2026-92622.md) | Oct 30, 2026 |
| Linux | rhc RHEL 10 | 0.3.2-6.el10_0.2 | [RHSA-2026:89892](https://patchblox.com/security/data/fix/linux/rhsa-2026-89892.md) | Oct 27, 2026 |
| Linux | rhc RHEL 8 | 1:0.2.5-13.el8_10 | [RHSA-2026:89741](https://patchblox.com/security/data/fix/linux/rhsa-2026-89741.md) | Oct 27, 2026 |
| Linux | rhc RHEL 9 | 1:0.2.7-16.el9_8 | [RHSA-2026:89740](https://patchblox.com/security/data/fix/linux/rhsa-2026-89740.md) | Oct 27, 2026 |
| Linux | rhc-devel RHEL 9 | 1:0.2.7-16.el9_8 | [RHSA-2026:89740](https://patchblox.com/security/data/fix/linux/rhsa-2026-89740.md) | Oct 27, 2026 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.