Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade runcUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade aardvark-dnsUpgrade criu-develUpgrade slirp4netnsUpgrade critUpgrade cockpit-podmanUpgrade golang-binUpgrade delveUpgrade git-lfsUpgrade container-selinuxUpgrade podman-dockerUpgrade libslirp-develUpgrade skopeo-testsUpgrade python3-criuUpgrade udicaUpgrade podman-remoteUpgrade buildah-testsUpgrade podman-gvproxyUpgrade skopeoUpgrade crunUpgrade podman-pluginsUpgrade podman-testsUpgrade netavarkUpgrade criu-libsUpgrade conmonUpgrade toolboxUpgrade libslirpUpgrade golang-testsUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade python3-podmanUpgrade golangUpgrade fuse-overlayfsUpgrade buildahUpgrade containers-commonUpgrade golang-miscUpgrade toolbox-testsUpgrade podman-catatonitUpgrade criuUpgrade gvisor-tap-vsockUpgrade golang-src | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-binUpgrade golang-sharedUpgrade golang-docs | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-docsUpgrade golang-shared | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go121Upgrade go122 | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | May 13, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 1, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 18, 2025 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade golang-srcUpgrade podman-remoteUpgrade crunUpgrade criu-develUpgrade libslirp-develUpgrade containers-commonUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade python3-criuUpgrade git-lfsUpgrade skopeoUpgrade delveUpgrade go-toolsetUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade buildah-testsUpgrade podmanUpgrade golang-testsUpgrade golang-docsUpgrade udicaUpgrade criuUpgrade critUpgrade conmonUpgrade podman-dockerUpgrade golangUpgrade libslirpUpgrade golang-miscUpgrade golang-binUpgrade buildahUpgrade aardvark-dnsUpgrade podman-testsUpgrade gvisor-tap-vsockUpgrade podman-gvproxyUpgrade runcUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade podman-catatonitUpgrade netavark | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade runcUpgrade openshiftUpgrade podmanUpgrade golang-github-prometheus-promuUpgrade cri-toolsUpgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade cri-o | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade skopeo-testsUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade criu-develUpgrade git-lfs-debugsourceUpgrade python3-podmanUpgrade runc-debugsourceUpgrade podman-dockerUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-develUpgrade cockpit-podmanUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade golang-srcUpgrade containernetworking-plugins-debugsourceUpgrade gvisor-tap-vsockUpgrade golangUpgrade slirp4netns-debugsourceUpgrade podman-testsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade crunUpgrade criu-debuginfoUpgrade golang-miscUpgrade buildahUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade libslirpUpgrade podman-debugsourceUpgrade git-lfsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade criuUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade aardvark-dnsUpgrade critUpgrade gvisor-tap-vsock-debuginfoUpgrade podman-catatonitUpgrade golang-docsUpgrade fuse-overlayfsUpgrade gvisor-tap-vsock-debugsourceUpgrade git-lfs-debuginfoUpgrade udicaUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade toolboxUpgrade podman-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade netavarkUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debugsourceUpgrade runcUpgrade podmanUpgrade libslirp-debugsourceNo solution existsUpgrade skopeo-debugsourceUpgrade rhc-worker-scriptUpgrade containers-commonUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debuginfoUpgrade golang-binUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade buildah-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade criu-develUpgrade libslirp-develUpgrade netavarkUpgrade delve-debuginfoUpgrade podmanUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade git-lfs-debuginfoUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade containers-commonUpgrade git-lfsUpgrade python3-criuUpgrade delveUpgrade delve-debugsourceUpgrade golangUpgrade golang-binUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade toolboxUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade runcUpgrade libslirpUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade conmonUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade podman-testsUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade crun-debuginfoUpgrade crunUpgrade critUpgrade podman-gvproxyUpgrade criuUpgrade go-toolsetUpgrade git-lfs-debugsourceUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.22Upgrade go1.21-openssl-raceUpgrade go1.22-raceUpgrade go1.22-docUpgrade go1.22-openssl-raceUpgrade go1.21Upgrade go1.21-openssl-docUpgrade go1.21-docUpgrade go1.22-opensslUpgrade go1.21-raceUpgrade go1.21-opensslUpgrade go1.22-openssl-doc | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.21-srcUpgrade golang-1.21Upgrade golang-1.22-srcUpgrade golang-1.17-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.22-goUpgrade golang-1.21-goUpgrade golang-1.17-srcUpgrade golang-1.18-srcUpgrade golang-1.22Upgrade golang-1.18Upgrade golang-1.18-go | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub