https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:35:14 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:0921 <p><strong>Affected:</strong> AlmaLinux:8: delve, AlmaLinux:8: go-toolset, AlmaLinux:8: golang, AlmaLinux:8: golang-bin, AlmaLinux:8: golang-docs, AlmaLinux:8: golang-misc, AlmaLinux:8: golang-race, AlmaLinux:8: golang-src, AlmaLinux:8: golang-tests</p> <p>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.</p> <p>Security Fix(es):</p> <p>* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: delve, AlmaLinux:8: go-toolset, AlmaLinux:8: golang, AlmaLinux:8: golang-bin, AlmaLinux:8: golang-docs, AlmaLinux:8: golang-misc, AlmaLinux:8: golang-race, AlmaLinux:8: golang-src, AlmaLinux:8: golang-tests</p> <p>Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.</p> <p>Security Fix(es):</p> <p>* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:0921 https://cve.radiocsirt.org/vuln/bdu:2025-16242 bdu:2025-16242 https://cve.radiocsirt.org/vuln/bdu:2025-16242 https://cve.radiocsirt.org/vuln/bell-cve-2025-61729 <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: docker, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go</p> <p><strong>Affected:</strong> Alpaquita:23: go, Alpaquita:25: go, Alpaquita:stream: docker, Alpaquita:stream: go, BellSoft Hardened Containers:23: go, BellSoft Hardened Containers:25: go, BellSoft Hardened Containers:stream: go</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-61729 https://cve.radiocsirt.org/vuln/bit-golang-2025-61729 <p><strong>Affected:</strong> Bitnami: golang</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> https://cve.radiocsirt.org/vuln/bit-golang-2025-61729 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1078 certfr-2025-avi-1078 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1078 https://cve.radiocsirt.org/vuln/cleanstart-2025-jl63399 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: trust-manager</p> <p>Security vulnerability affects the trust-manager package. This issue is resolved in later releases. See references for CVE details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: trust-manager</p> <p>Security vulnerability affects the trust-manager package. This issue is resolved in later releases. See references for CVE details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-jl63399 https://cve.radiocsirt.org/vuln/euvd-2026-262461 EUVD-2026-262461 https://cve.radiocsirt.org/vuln/euvd-2026-262461 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61729 <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-61729 https://cve.radiocsirt.org/vuln/ghsa-7c64-f9jr-v9h2 <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> https://cve.radiocsirt.org/vuln/ghsa-7c64-f9jr-v9h2 https://cve.radiocsirt.org/vuln/msrc_cve-2025-61729 msrc_CVE-2025-61729 https://cve.radiocsirt.org/vuln/msrc_cve-2025-61729 https://cve.radiocsirt.org/vuln/oesa-2025-2825 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: golang</p> <p>. Security Fix(es):</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.(CVE-2025-61729)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: golang</p> <p>. Security Fix(es):</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.(CVE-2025-61729)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2825 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15795-1 <p>go1.25-1.25.5-1.1 on GA media</p> <p>go1.25-1.25.5-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15795-1 https://cve.radiocsirt.org/vuln/rhsa-2026:0981 <p>crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate urllib3: urllib3 Streaming API improperly handles highly compressed data urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)</p> <p>crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate urllib3: urllib3 Streaming API improperly handles highly compressed data urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)</p> https://cve.radiocsirt.org/vuln/rhsa-2026:0981 https://cve.radiocsirt.org/vuln/suse-su-2025:21192-1 <p>Security update for go1.25</p> <p>Security update for go1.25</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21192-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-61729 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-1.24, Ubuntu:24.04:LTS: golang-1.24, Ubuntu:25.10: golang-1.24, Ubuntu:25.10: golang-1.25, Ubuntu:26.04:LTS: golang-1.24, Ubuntu:26.04:LTS: golang-1.25</p> <p>Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-61729 https://cve.radiocsirt.org/vuln/vde-2026-088 <p>The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.</p> <p>The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25</p> <p>All other vulnerabilities are to be fixed in the upcoming releases.</p> <p>The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25.</p> <p>The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25</p> <p>All other vulnerabilities are to be fixed in the upcoming releases.</p> https://cve.radiocsirt.org/vuln/vde-2026-088 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2724 <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2724