# CVE-2025-61727: Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 CVE-2025-61727 is fixed in 43 products on 1 platform, first by SUSE-SU-2025:4336-1, released December 9, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-61727 - Priority: Routine - CVSS: 6.5 (Moderate) - EPSS: 0.0030 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Dec 6, 2025 - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61727 ## Description go#76463 go#76442 bsc#1254430 security: fix crypto/x509: excluded subdomain constraint doesn't preclude wildcard SAN ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | amazon-cloudwatch-agent amzn 2023 | 1.300062.1-1.amzn2023 | [ALAS2023-2025-1358](https://patchblox.com/security/data/fix/linux/alas2023-2025-1358.md) | Jan 7, 2026 | | Linux | amazon-ecr-credential-helper amzn 2023 | 0.11.0-2.amzn2023 | [ALAS2023-2025-1327](https://patchblox.com/security/data/fix/linux/alas2023-2025-1327.md) | Jan 7, 2026 | | Linux | amazon-ssm-agent amzn 2023 | 3.3.3572.0-1.amzn2023 | [ALAS2023-2025-1359](https://patchblox.com/security/data/fix/linux/alas2023-2025-1359.md) | Jan 7, 2026 | | Linux | captree amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | captree-debuginfo amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | cni-plugins amzn 2023 | 1.7.1-1.amzn2023.0.4 | [ALAS2023-2025-1321](https://patchblox.com/security/data/fix/linux/alas2023-2025-1321.md) | Jan 7, 2026 | | Linux | cni-plugins-debuginfo amzn 2023 | 1.7.1-1.amzn2023.0.4 | [ALAS2023-2025-1321](https://patchblox.com/security/data/fix/linux/alas2023-2025-1321.md) | Jan 7, 2026 | | Linux | cni-plugins-debugsource amzn 2023 | 1.7.1-1.amzn2023.0.4 | [ALAS2023-2025-1321](https://patchblox.com/security/data/fix/linux/alas2023-2025-1321.md) | Jan 7, 2026 | | Linux | containerd amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-debuginfo amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-debugsource amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-stress amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | containerd-stress-debuginfo amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1333](https://patchblox.com/security/data/fix/linux/alas2023-2025-1333.md) | Jan 7, 2026 | | Linux | docker amzn 2023 | 25.0.13-1.amzn2023.0.3 | [ALAS2023-2025-1329](https://patchblox.com/security/data/fix/linux/alas2023-2025-1329.md) | Jan 7, 2026 | | Linux | docker-debuginfo amzn 2023 | 25.0.13-1.amzn2023.0.3 | [ALAS2023-2025-1329](https://patchblox.com/security/data/fix/linux/alas2023-2025-1329.md) | Jan 7, 2026 | | Linux | docker-debugsource amzn 2023 | 25.0.13-1.amzn2023.0.3 | [ALAS2023-2025-1329](https://patchblox.com/security/data/fix/linux/alas2023-2025-1329.md) | Jan 7, 2026 | | Linux | ecs-init amzn 2023 | 1.101.1-1.amzn2023 | [ALAS2023-2025-1341](https://patchblox.com/security/data/fix/linux/alas2023-2025-1341.md) | Jan 7, 2026 | | Linux | go1.24 opensuse-leap 15.6 | 1.24.11-150000.1.50.1 | [SUSE-SU-2025:4337-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4337-1.md) | Dec 9, 2025 | | Linux | go1.24 opensuse-leap 16.0 | 1.24.11-160000.1.1 | [OPENSUSE-SU-2025:20158-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20158-1.md) | Dec 12, 2025 | | Linux | go1.24 sles 15.6 | 1.24.11-150000.1.50.1 | [SUSE-SU-2025:4337-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4337-1.md) | Dec 9, 2025 | | Linux | go1.24 sles 15.7 | 1.24.11-150000.1.50.1 | [SUSE-SU-2025:4337-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4337-1.md) | Dec 9, 2025 | | Linux | go1.24 sles 16.0 | 1.24.11-160000.1.1 | [SUSE-SU-2025:21193-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-21193-1.md) | Dec 12, 2025 | | Linux | go1.24-openssl opensuse-leap 15.6 | 1.24.12-150600.13.15.1 | [SUSE-SU-2026:0308-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0308-1.md) | Jan 28, 2026 | | Linux | go1.24-openssl opensuse-leap 16.0 | 1.24.13-160000.1.1 | [OPENSUSE-SU-2026:20308-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20308-1.md) | Mar 3, 2026 | | Linux | go1.24-openssl sles 15.6 | 1.24.12-150600.13.15.1 | [SUSE-SU-2026:0308-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0308-1.md) | Jan 28, 2026 | | Linux | go1.24-openssl sles 15.7 | 1.24.12-150600.13.15.1 | [SUSE-SU-2026:0308-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0308-1.md) | Jan 28, 2026 | | Linux | go1.24-openssl sles 16.0 | 1.24.13-160000.1.1 | [SUSE-SU-2026:20629-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20629-1.md) | Mar 3, 2026 | | Linux | go1.25 opensuse-leap 15.6 | 1.25.5-150000.1.23.1 | [SUSE-SU-2025:4336-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4336-1.md) | Dec 9, 2025 | | Linux | go1.25 opensuse-leap 16.0 | 1.25.5-160000.1.1 | [OPENSUSE-SU-2025:20157-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20157-1.md) | Dec 12, 2025 | | Linux | go1.25 sles 15.6 | 1.25.5-150000.1.23.1 | [SUSE-SU-2025:4336-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4336-1.md) | Dec 9, 2025 | | Linux | go1.25 sles 15.7 | 1.25.5-150000.1.23.1 | [SUSE-SU-2025:4336-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4336-1.md) | Dec 9, 2025 | | Linux | go1.25 sles 16.0 | 1.25.5-160000.1.1 | [SUSE-SU-2025:21192-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-21192-1.md) | Dec 12, 2025 | | Linux | go1.25-openssl opensuse-leap 15.6 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 | | Linux | go1.25-openssl opensuse-leap 16.0 | 1.25.7-160000.1.1 | [OPENSUSE-SU-2026:20301-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20301-1.md) | Mar 3, 2026 | | Linux | go1.25-openssl sles 15.6 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 | | Linux | go1.25-openssl sles 15.7 | 1.25.6-150600.13.9.1 | [SUSE-SU-2026:0298-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0298-1.md) | Jan 26, 2026 | | Linux | go1.25-openssl sles 16.0 | 1.25.7-160000.1.1 | [SUSE-SU-2026:20623-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20623-1.md) | Mar 3, 2026 | | Linux | golang amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-bin amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-docs amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-misc amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-shared amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-src amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | golang-tests amzn 2023 | 1.24.11-1.amzn2023.0.1 | [ALAS2023-2025-1323](https://patchblox.com/security/data/fix/linux/alas2023-2025-1323.md) | Jan 7, 2026 | | Linux | govulncheck-vulndb opensuse-leap 15.6 | 0.0.20251209T172047-150000.1.127.1 | [SUSE-SU-2025:4395-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4395-1.md) | Dec 15, 2025 | | Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 | | Linux | govulncheck-vulndb sles 15.6 | 0.0.20251209T172047-150000.1.127.1 | [SUSE-SU-2025:4395-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4395-1.md) | Dec 15, 2025 | | Linux | libcap amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-debuginfo amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-debugsource amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-devel amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | libcap-static amzn 2023 | 2.73-1.amzn2023.0.5 | [ALAS2023-2025-1322](https://patchblox.com/security/data/fix/linux/alas2023-2025-1322.md) | Jan 7, 2026 | | Linux | nerdctl amzn 2023 | 2.1.5-1.amzn2023.0.3 | [ALAS2023-2025-1326](https://patchblox.com/security/data/fix/linux/alas2023-2025-1326.md) | Jan 7, 2026 | | Linux | oci-add-hooks amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.7 | [ALAS2023-2025-1335](https://patchblox.com/security/data/fix/linux/alas2023-2025-1335.md) | Jan 7, 2026 | | Linux | oci-add-hooks-debuginfo amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.7 | [ALAS2023-2025-1335](https://patchblox.com/security/data/fix/linux/alas2023-2025-1335.md) | Jan 7, 2026 | | Linux | oci-add-hooks-debugsource amzn 2023 | 0-0.1.20200504git268e3bb.amzn2023.0.7 | [ALAS2023-2025-1335](https://patchblox.com/security/data/fix/linux/alas2023-2025-1335.md) | Jan 7, 2026 | | Linux | runc amzn 2023 | 1.3.4-1.amzn2023.0.1 | [ALAS2023-2025-1328](https://patchblox.com/security/data/fix/linux/alas2023-2025-1328.md) | Jan 7, 2026 | | Linux | runc-debuginfo amzn 2023 | 1.3.4-1.amzn2023.0.1 | [ALAS2023-2025-1328](https://patchblox.com/security/data/fix/linux/alas2023-2025-1328.md) | Jan 7, 2026 | | Linux | runc-debugsource amzn 2023 | 1.3.4-1.amzn2023.0.1 | [ALAS2023-2025-1328](https://patchblox.com/security/data/fix/linux/alas2023-2025-1328.md) | Jan 7, 2026 | | Linux | runfinch-finch amzn 2023 | 1.10.0-1.amzn2023.0.6 | [ALAS2023-2025-1336](https://patchblox.com/security/data/fix/linux/alas2023-2025-1336.md) | Jan 7, 2026 | | Linux | soci-snapshotter amzn 2023 | 0.12.0-1.amzn2023.0.2 | [ALAS2023-2025-1334](https://patchblox.com/security/data/fix/linux/alas2023-2025-1334.md) | Jan 7, 2026 | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.