During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade udicaUpgrade podman-catatonitUpgrade podman-remoteUpgrade skopeo-testsUpgrade container-selinuxUpgrade golang-testsUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade critUpgrade osbuild-composer-workerUpgrade podmanUpgrade python3-criuUpgrade runcUpgrade conmonUpgrade golang-docsUpgrade toolboxUpgrade slirp4netnsUpgrade criu-develUpgrade cockpit-podmanUpgrade podman-testsUpgrade podman-pluginsUpgrade podman-dockerUpgrade golang-binUpgrade criuUpgrade libslirpUpgrade delveUpgrade crunUpgrade buildah-testsUpgrade criu-libsUpgrade aardvark-dnsUpgrade go-toolsetUpgrade golang-raceUpgrade git-lfsUpgrade golang-srcUpgrade opentelemetry-collectorUpgrade grafana-pcpUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade netavarkUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade golangUpgrade skopeoUpgrade golang-miscUpgrade grafana-selinuxUpgrade buildahUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade grafana | May 7, 2026 | May 6, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade dockerUpgrade oci-add-hooksUpgrade golang-srcUpgrade golang-binUpgrade runfinch-finchUpgrade golangUpgrade nerdctl-debuginfoUpgrade soci-snapshotterUpgrade golang-miscUpgrade containerdUpgrade golist-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-docsUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade nerdctlUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade golang-sharedUpgrade runc-debuginfoUpgrade golistUpgrade runc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade soci-snapshotterUpgrade containerd-stress-debuginfoUpgrade golang-github-burntsushi-toml-develUpgrade docker-debugsourceUpgrade golang-miscUpgrade golist-debugsourceUpgrade oci-add-hooksUpgrade golang-srcUpgrade dockerUpgrade golangUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade runc-debugsourceUpgrade runfinch-finchUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golang-github-burntsushi-toml-debugsourceUpgrade yq-debuginfoUpgrade golang-github-burntsushi-tomlUpgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade yqUpgrade docker-debuginfoUpgrade golang-github-burntsushi-toml-testUpgrade golang-testsUpgrade ecs-initUpgrade amazon-cloudwatch-agentUpgrade runc-debuginfoUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade credentials-fetcherUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade runcUpgrade golang-github-cpuguy83-md2manUpgrade golang-docsUpgrade nerdctlUpgrade oci-add-hooks-debugsourceUpgrade golang-binUpgrade containerd-debugsourceUpgrade golist-debuginfoUpgrade containerd-stressUpgrade yq-debugsourceUpgrade golang-sharedUpgrade golang-github-burntsushi-toml-test-develUpgrade containerd-debuginfoUpgrade oci-add-hooks-debuginfo | May 4, 2026 | Apr 8, 2026 |
| Oracle_linux | — | Upgrade golang-docsUpgrade git-lfsUpgrade grafanaUpgrade golang-srcUpgrade go-toolsetUpgrade golangUpgrade golang-miscUpgrade golang-raceUpgrade golang-testsUpgrade golang-binUpgrade delveUpgrade grafana-selinuxUpgrade grafana-pcp | Apr 27, 2026 | Apr 8, 2026 |
| Redhat Openshift | — | Upgrade containernetworking-pluginsUpgrade openshiftUpgrade skopeoUpgrade openshift-clientsUpgrade runcUpgrade podmanUpgrade butaneUpgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade cri-toolsUpgrade ignitionUpgrade cri-o | Aug 10, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade fuse-overlayfsUpgrade git-lfs-debugsourceUpgrade conmon-debugsourceUpgrade image-builderUpgrade osbuild-composer-tests-debuginfoUpgrade criu-debuginfoUpgrade osbuild-composer-coreUpgrade criu-libsUpgrade rhc-worker-playbookUpgrade yggdrasil-develUpgrade runc-debugsourceUpgrade flightctl-observabilityUpgrade gvisor-tap-vsockUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade rhc-debugsourceUpgrade flightctl-selinuxUpgrade flightctl-cliUpgrade golang-miscUpgrade rhcUpgrade image-builder-debuginfoUpgrade crun-debuginfoUpgrade golangUpgrade osbuild-composer-dnf-jsonUpgrade git-lfs-debuginfoUpgrade python3-podmanUpgrade image-builder-debugsourceUpgrade go-fdo-client-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade netavarkUpgrade crun-debugsourceUpgrade grafana-pcpUpgrade containers-commonUpgrade host-metering-selinuxUpgrade gvisor-tap-vsock-gvforwarderUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade opentelemetry-collectorUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafanaUpgrade go-fdo-server-ownerUpgrade gvisor-tap-vsock-debuginfoUpgrade go-fdo-server-manufacturerUpgrade go-toolsetUpgrade buildahUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade git-lfsUpgrade aardvark-dnsUpgrade rhc-develUpgrade osbuild-composerUpgrade golang-srcUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade golang-raceUpgrade criu-debugsourceUpgrade conmonUpgrade grafana-debuginfoUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade golang-testsUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade runcUpgrade flightctl-agentUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade udicaUpgrade rhc-worker-playbook-debuginfoUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golang-binUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-fdo-server-rendezvousUpgrade yggdrasilUpgrade criuUpgrade rhc-worker-playbook-debugsourceUpgrade ipp-usb-debuginfoUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade grafana-pcp-debuginfoUpgrade host-metering-debuginfoUpgrade toolboxUpgrade podman-tests-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade grafana-selinuxUpgrade podman-testsUpgrade podman-dockerUpgrade go-fdo-server-debuginfoUpgrade go-fdo-clientUpgrade criu-develUpgrade yggdrasil-debuginfoUpgrade skopeoUpgrade grafana-pcp-debugsourceUpgrade libslirp-debugsourceUpgrade cockpit-podmanUpgrade golang-docsUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade ipp-usbUpgrade flightctl-servicesUpgrade host-metering-debugsourceUpgrade crunUpgrade osbuild-composer-workerNo solution existsUpgrade go-fdo-serverUpgrade critUpgrade grafana-debugsourceUpgrade yggdrasil-debugsourceUpgrade criu-libs-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade rhc-worker-scriptUpgrade rhc-debuginfoUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade host-meteringUpgrade go-fdo-client-debuginfoUpgrade delve-debugsourceUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade yggdrasil-examples-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade libslirpUpgrade go-fdo-server-debugsourceUpgrade osbuild-composer-debuginfo | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade slirp4netnsUpgrade yggdrasil-debuginfoUpgrade conmon-debuginfoUpgrade crunUpgrade ipp-usb-debuginfoUpgrade buildah-debuginfoUpgrade grafana-pcp-debugsourceUpgrade osbuild-composer-debuginfoUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade go-fdo-server-debugsourceUpgrade golangUpgrade osbuild-composer-workerUpgrade git-lfs-debugsourceUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade criuUpgrade buildahUpgrade podman-tests-debuginfoUpgrade conmon-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade go-toolsetUpgrade golang-raceUpgrade go-fdo-clientUpgrade grafana-debuginfoUpgrade netavarkUpgrade toolbox-testsUpgrade containernetworking-plugins-debugsourceUpgrade ipp-usbUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade libslirpUpgrade criu-libs-debuginfoUpgrade opentelemetry-collectorUpgrade go-fdo-client-debugsourceUpgrade criu-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade osbuild-composer-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade runcUpgrade conmonUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade grafana-debugsourceUpgrade libslirp-debuginfoUpgrade yggdrasilUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debuginfoUpgrade image-builder-debugsourceUpgrade grafana-pcpUpgrade go-fdo-server-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade criu-develUpgrade yggdrasil-develUpgrade podman-plugins-debuginfoUpgrade grafana-selinuxUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade image-builderUpgrade grafanaUpgrade podman-remote-debuginfoUpgrade osbuild-composerUpgrade libslirp-develUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade go-fdo-serverUpgrade osbuild-composer-core-debuginfoUpgrade podmanUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade git-lfsUpgrade delve-debuginfoUpgrade yggdrasil-debugsourceUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade git-lfs-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade skopeoUpgrade podman-debugsourceUpgrade image-builder-debuginfoUpgrade crun-debugsourceUpgrade criu-libsUpgrade toolboxUpgrade delveUpgrade go-fdo-client-debuginfoUpgrade delve-debugsource | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 9.4.13Upgrade Splunk Enterprise to version 10.2.5 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub