Количество 200
Количество 200
RLSA-2026:39573
Important: yggdrasil security update
ELSA-2026-39573
ELSA-2026-39573: yggdrasil security update (IMPORTANT)
RLSA-2026:34359
Important: opentelemetry-collector security update
RLSA-2026:34357
Important: opentelemetry-collector security update
RLSA-2026:35832
Important: golang-github-openprinting-ipp-usb security update
ELSA-2026-35832
ELSA-2026-35832: golang-github-openprinting-ipp-usb security update (IMPORTANT)
RLSA-2026:46395
Important: go-fdo-server security update
ELSA-2026-46395
ELSA-2026-46395: go-fdo-server security update (IMPORTANT)
RLSA-2026:38995
Important: go-toolset:rhel8 security, bug fix, and enhancement update
ELSA-2026-38995
ELSA-2026-38995: go-toolset:ol8 security, bug fix, and enhancement update (IMPORTANT)
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
CVE-2026-27145
Inefficient candidate hostname parsing in crypto/x509
CVE-2026-27145
*x509.Certificate).VerifyHostname previously called matchHostnames in ...
RLSA-2026:46394
Important: go-fdo-client security update
GHSA-4279-q6mj-392r
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
ELSA-2026-46394
ELSA-2026-46394: go-fdo-client security update (IMPORTANT)
BDU:2026-09275
Уязвимость компонента crypto/x509 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:21254-1
Security update for go1.26-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2026:39573 Important: yggdrasil security update | 2 месяца назад | ||
| ELSA-2026-39573 ELSA-2026-39573: yggdrasil security update (IMPORTANT) | 2 месяца назад | ||
| RLSA-2026:34359 Important: opentelemetry-collector security update | 2 месяца назад | ||
| RLSA-2026:34357 Important: opentelemetry-collector security update | 2 месяца назад | ||
| RLSA-2026:35832 Important: golang-github-openprinting-ipp-usb security update | 2 месяца назад | ||
| ELSA-2026-35832 ELSA-2026-35832: golang-github-openprinting-ipp-usb security update (IMPORTANT) | 2 месяца назад | ||
| RLSA-2026:46395 Important: go-fdo-server security update | около 2 месяцев назад | ||
| ELSA-2026-46395 ELSA-2026-46395: go-fdo-server security update (IMPORTANT) | около 2 месяцев назад | ||
| RLSA-2026:38995 Important: go-toolset:rhel8 security, bug fix, and enhancement update | 2 месяца назад | ||
| ELSA-2026-38995 ELSA-2026-38995: go-toolset:ol8 security, bug fix, and enhancement update (IMPORTANT) | 2 месяца назад | ||
 | CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates. | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates. | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-27145 Inefficient candidate hostname parsing in crypto/x509 | 1% Низкий | 3 месяца назад | |
| CVE-2026-27145 *x509.Certificate).VerifyHostname previously called matchHostnames in ... | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
| RLSA-2026:46394 Important: go-fdo-client security update | 1% Низкий | около 2 месяцев назад | |
| GHSA-4279-q6mj-392r (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates. | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
| ELSA-2026-46394 ELSA-2026-46394: go-fdo-client security update (IMPORTANT) | 1% Низкий | около 2 месяцев назад | |
 | BDU:2026-09275 Уязвимость компонента crypto/x509 языка программирования Go, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:21254-1 Security update for go1.26-openssl | 2 месяца назад |
Уязвимостей на страницу