Back Linuxsecurity

Fedora 45 golang-x-perf Denial of Service Vuln 2026

Linuxsecurity •LinuxSecurity Advisories • September 13, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

This package holds the source for various tools related to performance

measurement, storage, and analysis.

- cmd/benchstat contains a command-line tool that computes and 7

compares statistics benchmarks.

- cmd/benchsave contains a command-line tool for publishing benchmark

- storage contains the benchmark result

- analysis contains the benchmark result analysis

* Fri Sep 4 2026 Álex Sáez - 0-0.36 - Update to 19be9d8 * Wed Aug 12 2026 Alejandro Sáez - 0-0.35 - Update to 82a0b07

[ 1 ] Bug #2408280 - Private bug [ 2 ] Bug #2409753 - Private bug [ 3 ] Bug #2410703 - Private bug [ 4 ] Bug #2411599 - Private bug [ 5 ] Bug #2494324 - CVE-2026-27145 golang-x-perf: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-09a9388be9' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Denial of Service Vulnerability in Fedora's golang-x-perf Package A Denial of Service (DoS) vulnerability identified as CVE-2026-27145 affects the golang-x-perf package in Fedora 43 and 45. The flaw allows excessive processing of DNS Subject Alternative Name (SAN) entries, potentially leading to service disruptions. This vulnerability impacts systems running Fedora 43 and 45 that utilize the golang-x-perf package. The issue was publicly disclosed on June 2, 2026, with a proof-of-concept (PoC) available shortly after. Fedora users are urged to apply the latest updates to mitigate the risk. The vulnerability is categorized under the 'fedora-all' advisory. The update can be installed via the 'dnf' package manager. Administrators should prioritize patching to ensure system security. 3 sources 58

Extracted Entities

Fedora 45 golang-x-perf Denial of Service Vuln 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)