Description
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| golang.org/x/text | golang.org/x/text/secure/precis | < 0.41.0 | 0.41.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-golang-x-text | 0.41.0-1 | — |
| Debian 13 | golang-golang-x-text | No fix yet | — |
| Debian 12 | golang-golang-x-text | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | golang-golang-x-text | No fix yet | — |
| Ubuntu 26.04 LTS | golang-golang-x-text | No fix yet | — |
| Ubuntu 24.04 LTS | golang-golang-x-text | No fix yet | — |
| Ubuntu 22.04 LTS | golang-golang-x-text | No fix yet | — |
| Ubuntu 20.04 LTS | golang-x-text +1 | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | golang-x-text | No fix yet | — |
| Ubuntu 16.04 LTS | golang-x-text | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | caddy | 2.11.7-0.1.hum1 | RHSA-2026:75151 |
| Red Hat Hardened Images 1 | distribution | 3.1.2-0.1.hum1 | RHSA-2026:73401 |
| Red Hat Hardened Images 1 | etcd | 3.7.2-0.1.hum1 | RHSA-2026:70537 |
| Red Hat Hardened Images 1 | fulcio | 1.9.0-0.1.hum1 | RHSA-2026:76606 |
| Red Hat Hardened Images 1 | golang1.27 +5 | 1.27.1-2.hum1 | RHSA-2026:70700 |
| Red Hat Hardened Images 1 | grafana12.4 | 12.4.12-0.4.hum1 | RHSA-2026:76677 |
| Red Hat Hardened Images 1 | grafana13.1 | 13.1.7-0.1.hum1 | RHSA-2026:76448 |
| Red Hat Hardened Images 1 | grafana13.2 | 13.2.3-0.1.hum1 | RHSA-2026:76430 |
| Red Hat Hardened Images 1 | oauth2-proxy | 7.15.5-0.1.hum1 | RHSA-2026:74536 |
| Red Hat Hardened Images 1 | opentelemetry-collector +2 | 0.162.0-0.1.hum1 | RHSA-2026:73524, RHSA-2026:73523, RHSA-2026:73522 |
| Red Hat Hardened Images 1 | opentofu1.12 | 1.12.7-0.1.hum1 | RHSA-2026:74948 |
| Red Hat Hardened Images 1 | podman +4 | 6.1.3-1.hum1 | RHSA-2026:74861 |
| Red Hat Hardened Images 1 | prometheus3.13 | 3.13.3-0.2.hum1 | RHSA-2026:72750 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | keda | 2.14.1-19 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | grafana-12.3 | 12.3.11-r9 | — |
| Wolfi rolling | k3s-1.32 +4 | No fix yet | — |
| Wolfi rolling | kube-bench | 0.15.0-r22 | — |
| Wolfi rolling | kube-webhook-certgen-1.15 +1 | 1.15.11-r0 | — |
| Wolfi rolling | kuma-cp-2.12 +2 | 2.12.3-r28 | — |
| Wolfi rolling | renovate | 44.198.3-r1 | — |
| Wolfi rolling | timescaledb-parallel-copy | 0.13.0-r11 | — |
| Wolfi rolling | trino | 483-r12 | — |
| Wolfi rolling | typescript | 7.0.2-r2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | golang.org/x/text | < 0.41.0 | 0.41.0 | GO-2026-6629 |
Advisories 15
- RHSA-2026:76677 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:72750 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:74536 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:74861 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:74948 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:76448 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:73523 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:76430 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:70537 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:76606 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:73524 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:70700 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:75151 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:73401 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:73522 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026