Back Linuxsecurity

Fedora grpcurl Update Severity Denial of Service Advisory 2026

Linuxsecurity •LinuxSecurity Advisories • September 11, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers.

* Wed Sep 2 2026 Mikel Olasagasti Uranga - 1.9.4-1 - Update to 1.9.4 - Closes rhbz#2526612 * Thu Jul 16 2026 Fedora Release Engineering - 1.9.3-9 - Rebuilt for * Tue Feb 3 2026 Maxwell G - 1.9.3-8 - Rebuild for * Fri Jan 16 2026 Fedora Release Engineering - 1.9.3-7 - Rebuilt for

[ 1 ] Bug #2494311 - CVE-2026-27145 grpcurl: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-275646ea83' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Denial of Service Vulnerability in grpcurl Affects Fedora Systems A denial of service vulnerability (CVE-2026-27145) has been identified in grpcurl, a command-line tool for interacting with gRPC servers, affecting Fedora systems. The vulnerability allows for excessive processing of DNS SAN entries, potentially leading to service disruption. Fedora versions 1.9.3 and earlier are impacted, with an update to version 1.9.4 available to mitigate the risk. The vulnerability was published on June 2, 2026, with a proof-of-concept released shortly after. Users are advised to upgrade their systems to the latest version to prevent exploitation. The advisory emphasizes the importance of keeping Linux systems secure and up to date. The update can be installed using the 'dnf' package manager. Both articles were published on September 11, 2026, highlighting the urgency of addressing this vulnerability. 2 sources 58

Extracted Entities

Fedora grpcurl Update Severity Denial of Service Advisory 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)