On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-miscUpgrade golangUpgrade grafanaUpgrade grafana-pcpUpgrade golang-binUpgrade grafana-selinuxUpgrade golang-srcUpgrade delveUpgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade go-toolset | Oct 22, 2026 | Oct 20, 2026 |
| Gentoo Linux | — | Upgrade app-misc/ca-certificates. | Oct 21, 2026 | Oct 21, 2026 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade ca-certificatesUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade go-toolsetUpgrade golang | Oct 22, 2026 | Oct 21, 2026 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade podman-debugsourceUpgrade ipp-usbUpgrade podman-testsUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade golang-srcUpgrade delve-debuginfoUpgrade buildahUpgrade delveUpgrade buildah-testsUpgrade grafana-debugsourceUpgrade grafanaUpgrade podman-dockerUpgrade grafana-selinuxUpgrade grafana-pcp-debugsourceUpgrade grafana-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade buildah-debuginfoUpgrade ipp-usb-debuginfoUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade grafana-pcp-debuginfoUpgrade golang-binUpgrade podmanUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade podman-tests-debuginfoUpgrade golang-raceNo solution existsUpgrade podman-debuginfoUpgrade grafana-pcp | Oct 22, 2026 | Oct 20, 2026 |
| Rocky_linux | — | Upgrade podman-testsUpgrade grafana-debugsourceUpgrade podman-remoteUpgrade podman-debugsourceUpgrade grafana-debuginfoUpgrade grafana-selinuxUpgrade podmanUpgrade delveUpgrade ipp-usb-debuginfoUpgrade podman-tests-debuginfoUpgrade buildahUpgrade podman-debuginfoUpgrade golang-binUpgrade grafana-pcp-debugsourceUpgrade delve-debugsourceUpgrade grafana-pcp-debuginfoUpgrade buildah-testsUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade ipp-usbUpgrade grafana-pcpUpgrade grafanaUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade golangUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade golang-raceUpgrade delve-debuginfo | Oct 22, 2026 | Oct 21, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub