Skip to content
OpenAdvisories
High ELSA-2026-46394 1 CVE

Important: go-fdo-client security update (Oracle Linux 10)

Published Jul 27, 2026 · Updated Jul 27, 2026

Ecosystem: Oracle Linux

Summary

[1.0.0-5]
- Rebuild against updated golang

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 go-fdo-client 0:1.0.0-4.el10_2.5

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-27145 Public exploit

    Inefficient candidate hostname parsing in crypto/x509

    (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification c…

    Go standard library crypto/x509 golang stdlib Debian Ubuntu Azure Linux Wolfi Go