Skip to content
OpenAdvisories
Medium RHSA-2026:53416 1 CVE

Red Hat Security Advisory: host-metering security update

Published Aug 12, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 host-metering 0:1.4.0-8.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 host-metering-debuginfo 0:1.4.0-8.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 host-metering-debugsource 0:1.4.0-8.el7_9
Red Hat · RHEL 7 ELS rhel_els:7 host-metering-selinux 0:1.4.0-8.el7_9

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-27145 Public exploit

    Inefficient candidate hostname parsing in crypto/x509

    (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification c…

    Go standard library crypto/x509 golang stdlib Debian Ubuntu Azure Linux Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2484207
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53416.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-27145
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-27145
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-27145
  • article
    https://go.dev/cl/783621
  • article
    https://go.dev/issue/79694
  • article
    https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw
  • advisory
    https://pkg.go.dev/vuln/GO-2026-5037