Golang Go: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2025-61729

  Excessive resource consumption when printing error string for host certificate validation in crypto/x509

  Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certi…

  Go standard library crypto/x509 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 2, 2025
• Medium 6.5
  CVE-2025-61727

  Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

  An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.exa…

  Go standard library crypto/x509 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 3, 2025

Revision history

1. 2026-11-05 #94

   Neue Updates von Red Hat aufgenommen

2. 2026-10-15 #93

   Neue Updates von Red Hat aufgenommen

3. 2026-10-04 #92

   Neue Updates von IBM aufgenommen

4. 2026-08-18 #91

   Neue Updates von Red Hat aufgenommen

5. 2026-08-13 #90

   Neue Updates von Red Hat aufgenommen

6. 2026-08-06 #89

   Neue Updates von Red Hat aufgenommen

7. 2026-08-05 #88

   Neue Updates von Red Hat aufgenommen

8. 2026-08-03 #87

   Neue Updates von Red Hat aufgenommen

9. 2026-07-20 #86

   Neue Updates von Red Hat aufgenommen

10. 2026-07-19 #85

    Neue Updates von Red Hat aufgenommen

11. 2026-07-16 #84

    Neue Updates von Red Hat aufgenommen

12. 2026-07-15 #83

    Neue Updates von Red Hat aufgenommen

13. 2026-07-14 #82

    Neue Updates von Red Hat aufgenommen

14. 2026-07-08 #81

    Neue Updates von Red Hat und Oracle Linux aufgenommen

15. 2026-07-06 #80

    Neue Updates von Red Hat aufgenommen

16. 2026-06-25 #79

    Neue Updates von Dell und Red Hat aufgenommen

17. 2026-06-23 #78

    Neue Updates von Red Hat aufgenommen

18. 2026-06-22 #77

    Neue Updates von Red Hat aufgenommen

19. 2026-06-18 #76

    Neue Updates von Red Hat aufgenommen

20. 2026-06-17 #75

    Neue Updates von Red Hat aufgenommen

21. 2026-06-16 #74

    Neue Updates von Red Hat aufgenommen

22. 2026-06-11 #73

    Neue Updates von Red Hat aufgenommen

23. 2026-06-10 #72

    Neue Updates von Red Hat aufgenommen

24. 2026-05-28 #71

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

25. 2026-05-21 #70

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

References

• SUSE Security Update SUSE-SU-2025:21192-1 vom 2025-12-15
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023549.html
• SUSE Security Update SUSE-SU-2025:21193-1 vom 2025-12-15
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023548.html
• Golang Announce vom 2025-12-02
  https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
• Golang/Go GitHub vom 2025-12-02
  https://github.com/golang/go/issues/76445
• Golang/Go GitHub vom 2025-12-02
  https://github.com/golang/go/issues/76442
• Microsoft Leitfaden für Sicherheitsupdates vom 2025-12-09
  https://msrc.microsoft.com/update-guide/
• SUSE Security Update SUSE-SU-2025:4337-1 vom 2025-12-10
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V6FRZFUY7IMUIH434HM7TP3Z4LTXGEXM/
• SUSE Security Update SUSE-SU-2025:4336-1 vom 2025-12-10
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MQKJBVGIUPQFJGOASKZKHJ56ON2DGRDD/
• SUSE Security Update SUSE-SU-2025:4337-1 vom 2025-12-10
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023492.html
• SUSE Security Update SUSE-SU-2025:4336-1 vom 2025-12-10
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023493.html
• openSUSE Security Update OPENSUSE-SU-2025-20157-1 vom 2025-12-14
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2U4ZHXRG6FRV2PVCQEFXC42LYXWQIXQG/
• Amazon Linux Security Advisory ALAS2ECS-2025-090 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-090.html
• Amazon Linux Security Advisory ALAS2ECS-2025-091 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-091.html
• Amazon Linux Security Advisory ALAS2-2025-3119 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3119.html
• Amazon Linux Security Advisory ALAS2-2025-3118 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3118.html
• Amazon Linux Security Advisory ALAS2-2025-3120 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3120.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-083 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-083.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-084 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-084.html
• Amazon Linux Security Advisory ALAS2-2025-3098 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3098.html
• Amazon Linux Security Advisory ALAS2-2025-3100 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3100.html
• Amazon Linux Security Advisory ALAS2-2025-3097 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3097.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-082 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-082.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-081 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-081.html
• Amazon Linux Security Advisory ALAS2-2025-3105 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3105.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-080 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-080.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-079 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-079.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-087 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-087.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-088 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-088.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-089 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-089.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-090 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-090.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-091 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-091.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-092 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-092.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-093 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-093.html
• Amazon Linux Security Advisory ALAS2DOCKER-2025-094 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-094.html
• Amazon Linux Security Advisory ALAS2ECS-2025-086 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-086.html
• Amazon Linux Security Advisory ALAS2ECS-2025-087 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-087.html
• Amazon Linux Security Advisory ALAS2ECS-2025-088 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-088.html
• Amazon Linux Security Advisory ALAS2ECS-2025-089 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-089.html
• openSUSE Security Update OPENSUSE-SU-2026:10030-1 vom 2026-01-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DOH4RQD6DF6QJ5K5LPUZIBSPIUJOV4WF/
• openSUSE Security Update OPENSUSE-SU-2026:10031-1 vom 2026-01-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D4YDMFDXLFWYJ3MDUGV7CSZRLJCE7BFT/
• Red Hat Security Advisory RHSA-2026:0921 vom 2026-01-21
  https://access.redhat.com/errata/RHSA-2026:0921
• Red Hat Security Advisory RHSA-2026:0922 vom 2026-01-21
  https://access.redhat.com/errata/RHSA-2026:0922
• Oracle Linux Security Advisory ELSA-2026-0923 vom 2026-01-21
  https://linux.oracle.com/errata/ELSA-2026-0923.html
• Amazon Linux Security Advisory ALAS2ECS-2026-094 vom 2026-01-22
  https://alas.aws.amazon.com/AL2/ALAS2ECS-2026-094.html
• Red Hat Security Advisory RHSA-2026:0923 vom 2026-01-21
  https://access.redhat.com/errata/RHSA-2026:0923
• Oracle Linux Security Advisory ELSA-2026-0921 vom 2026-01-21
  https://linux.oracle.com/errata/ELSA-2026-0921.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2026-085 vom 2026-01-22
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2026-085.html
• Oracle Linux Security Advisory ELSA-2026-0922 vom 2026-01-21
  https://linux.oracle.com/errata/ELSA-2026-0922.html
• Rocky Linux Security Advisory RLSA-2026:0921 vom 2026-01-22
  https://errata.build.resf.org/RLSA-2026:0921
• Rocky Linux Security Advisory RLSA-2026:0923 vom 2026-01-22
  https://errata.build.resf.org/RLSA-2026:0923
• Red Hat Security Advisory RHSA-2026:1038 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:1038
• Red Hat Security Advisory RHSA-2026:1017 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:1017
• Red Hat Security Advisory RHSA-2026:1018 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:1018
• Red Hat Security Advisory RHSA-2026:1042 vom 2026-01-22
  https://access.redhat.com/errata/RHSA-2026:1042
• Rocky Linux Security Advisory RLSA-2026:0922 vom 2026-01-23
  https://errata.build.resf.org/RLSA-2026:0922
• Red Hat Security Advisory RHSA-2026:1168 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:1168
• SUSE Security Update SUSE-SU-2026:0297-1 vom 2026-01-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023924.html
• Red Hat Security Advisory RHSA-2026:1249 vom 2026-01-26
  https://access.redhat.com/errata/RHSA-2026:1249
• SUSE Security Update SUSE-SU-2026:0298-1 vom 2026-01-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5Q63UO2LYEIXNPXRBOE6F42PWFVTQ6LQ/
• SUSE Security Update SUSE-SU-2026:0296-1 vom 2026-01-26
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023920.html
• Red Hat Security Advisory RHSA-2026:1344 vom 2026-01-27
  https://access.redhat.com/errata/RHSA-2026:1344
• Oracle Linux Security Advisory ELSA-2026-1344 vom 2026-01-28
  https://linux.oracle.com/errata/ELSA-2026-1344.html
• Red Hat Security Advisory RHSA-2026:1416 vom 2026-01-27
  https://access.redhat.com/errata/RHSA-2026:1416
• Red Hat Security Advisory RHSA-2026:1431 vom 2026-01-27
  https://access.redhat.com/errata/RHSA-2026:1431
• Rocky Linux Security Advisory RLSA-2026:1344 vom 2026-01-28
  https://errata.build.resf.org/RLSA-2026:1344
• Red Hat Security Advisory RHSA-2026:1497 vom 2026-01-28
  https://access.redhat.com/errata/RHSA-2026:1497
• Red Hat Security Advisory RHSA-2026:1506 vom 2026-01-28
  https://access.redhat.com/errata/RHSA-2026:1506
• SUSE Security Update SUSE-SU-2026:0308-1 vom 2026-01-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023937.html
• Red Hat Security Advisory RHSA-2026:1518 vom 2026-01-29
  https://access.redhat.com/errata/RHSA-2026:1518
• Oracle Linux Security Advisory ELSA-2026-1518 vom 2026-01-29
  https://linux.oracle.com/errata/ELSA-2026-1518.html
• Rocky Linux Security Advisory RLSA-2026:1518 vom 2026-01-31
  https://errata.build.resf.org/RLSA-2026:1518
• IBM Security Bulletin 7259319 vom 2026-01-30
  https://www.ibm.com/support/pages/node/7259319
• Red Hat Security Advisory RHSA-2026:1715 vom 2026-02-02
  https://access.redhat.com/errata/RHSA-2026:1715
• Oracle Linux Security Advisory ELSA-2026-1715 vom 2026-02-02
  http://linux.oracle.com/errata/ELSA-2026-1715.html
• Red Hat Security Advisory RHSA-2026:1814 vom 2026-02-03
  https://access.redhat.com/errata/RHSA-2026:1814
• Red Hat Security Advisory RHSA-2026:1813 vom 2026-02-03
  https://access.redhat.com/errata/RHSA-2026:1813
• Red Hat Security Advisory RHSA-2026:1845 vom 2026-02-03
  https://access.redhat.com/errata/RHSA-2026:1845
• Red Hat Security Advisory RHSA-2026:1907 vom 2026-02-04
  https://access.redhat.com/errata/RHSA-2026:1907
• Red Hat Security Advisory RHSA-2026:1938 vom 2026-02-04
  https://access.redhat.com/errata/RHSA-2026:1938
• Rocky Linux Security Advisory RLSA-2026:1715 vom 2026-02-05
  https://errata.build.resf.org/RLSA-2026:1715