Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Within HostnameError.Error(), when constructing an error string, there ...

Important: grafana-pcp security update

Important: grafana security update

Important: golang security update

Important: golang security update

Important: go-toolset:rhel8 security update

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.

ELSA-2026-2124: osbuild-composer security update (IMPORTANT)

ELSA-2026-1715: golang-github-openprinting-ipp-usb security update (IMPORTANT)

ELSA-2026-1518: grafana-pcp security update (IMPORTANT)

ELSA-2026-1344: grafana security update (IMPORTANT)

ELSA-2026-0923: golang security update (IMPORTANT)

ELSA-2026-0922: golang security update (IMPORTANT)

ELSA-2026-0921: go-toolset:ol8 security update (IMPORTANT)

Уязвимость функции HostnameError.Error() пакета crypto/x509 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании

Security update for go1.24

Security update for go1.25