Release date:
2026-07-13 15:14:00 UTC
Description:
- CVE-2026-27145: fix quadratic complexity in crypto/x509 (*Certificate).VerifyHostname by splitting the candidate hostname once instead of on every DNS SAN comparison, preventing CPU exhaustion (DoS) from certificates with large DNS SAN lists
Updated packages:
-
go-toolset-1.25.7-1.el9_6.tuxcare.els12.x86_64.rpm
sha:a3ba2d68c7a61338dc25f90695bea535be823a59188c8d08fc48bd1feccb755f
-
golang-1.25.7-1.el9_6.tuxcare.els12.x86_64.rpm
sha:3e6a9a75fb573b9805f759774d7a49edef644a3b3b8d765d4eaf32ca1089cc88
-
golang-bin-1.25.7-1.el9_6.tuxcare.els12.x86_64.rpm
sha:85a17686c239f09f4582467fc920e1054a8d6be51b6b54ed48162f5e09e0bb52
-
golang-docs-1.25.7-1.el9_6.tuxcare.els12.noarch.rpm
sha:16d7af755a1c8a62f38ffa554cfc2b47966518719b39a494fc8c378819920892
-
golang-misc-1.25.7-1.el9_6.tuxcare.els12.noarch.rpm
sha:64b80db6d3b9602ed71dcd797d12ce0af2290ccbddc2f3a633b501a6aca72862
-
golang-race-1.25.7-1.el9_6.tuxcare.els12.x86_64.rpm
sha:2257b3dd9312b3da3085fb373c0fa466ca8867c8d5633d21ea3ff03c6890c75c
-
golang-src-1.25.7-1.el9_6.tuxcare.els12.noarch.rpm
sha:e72c10606cdad4adf4a0a486ed26df5c35cf5b0b44c527d67eb5d6d35d811604
-
golang-tests-1.25.7-1.el9_6.tuxcare.els12.noarch.rpm
sha:54bdd81956ea64ae4c6f4e7c829c5173d501a7a9f9a3b396e67cd951ac992d73
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
