Skip to content
OpenAdvisories
High ELSA-2026-53416 1 CVE

Important: host-metering security update (Oracle Linux 7)

Published Sep 23, 2026 · Updated Sep 23, 2026

Ecosystem: Oracle Linux

Summary

[1.2.0-4.0.3]
- Rebuild with latest go-toolset-1.19-golang to fix CVE-2026-27145 [Orabug: 39863765]

[1.2.0-4.0.1]
- Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 [Orabug: 39352233]

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 host-metering 0:1.2.0-4.0.3.el7_9
Oracle Linux · 7 host-metering-selinux 0:1.2.0-4.0.3.el7_9

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-27145 Public exploit

    Inefficient candidate hostname parsing in crypto/x509

    (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification c…

    Go standard library crypto/x509 golang stdlib Debian Ubuntu Azure Linux Wolfi Go