When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opentelemetry-collector | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | Apr 13, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade rhc-debuginfoUpgrade go-fdo-serverUpgrade golang-raceUpgrade podman-debugsourceUpgrade ignition-debugsourceUpgrade grafanaUpgrade flightctl-servicesNo solution existsUpgrade delveUpgrade yggdrasil-examples-debuginfoUpgrade osbuild-composer-debugsourceUpgrade go-fdo-server-manufacturerUpgrade go-fdo-client-debugsourceUpgrade flightctl-observabilityUpgrade podman-remote-debuginfoUpgrade podman-testsUpgrade podmanUpgrade git-lfs-debugsourceUpgrade go-fdo-server-debugsourceUpgrade yggdrasilUpgrade flightctl-agentUpgrade go-fdo-client-debuginfoUpgrade podman-dockerUpgrade grafana-debugsourceUpgrade grafana-selinuxUpgrade osbuild-composer-debuginfoUpgrade rhcUpgrade image-builder-debuginfoUpgrade buildah-debugsourceUpgrade golang-testsUpgrade podman-tests-debuginfoUpgrade grafana-pcp-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade ignition-debuginfoUpgrade go-fdo-server-debuginfoUpgrade delve-debugsourceUpgrade golang-docsUpgrade go-fdo-server-rendezvousUpgrade ipp-usb-debuginfoUpgrade osbuild-composer-workerUpgrade ignition-validateUpgrade opentelemetry-collectorUpgrade ignitionUpgrade grafana-debuginfoUpgrade grafana-pcpUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade yggdrasil-develUpgrade ipp-usbUpgrade buildah-testsUpgrade go-fdo-clientUpgrade golang-binUpgrade yggdrasil-debuginfoUpgrade rhc-worker-playbook-debuginfoUpgrade buildahUpgrade osbuild-composer-coreUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade podman-debuginfoUpgrade flightctl-selinuxUpgrade osbuild-composerUpgrade buildah-tests-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade image-builder-debugsourceUpgrade grafana-pcp-debuginfoUpgrade golangUpgrade buildah-debuginfoUpgrade ignition-validate-debuginfoUpgrade podman-remoteUpgrade golang-miscUpgrade rhc-worker-playbook-debugsourceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade flightctl-cliUpgrade rhc-debugsourceUpgrade yggdrasil-debugsourceUpgrade rhc-worker-playbookUpgrade git-lfsUpgrade go-fdo-server-ownerUpgrade image-builderUpgrade ignition-edge | May 20, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade osbuild-composer-coreUpgrade image-builder-debugsourceUpgrade ipp-usbUpgrade osbuild-composer-core-debuginfoUpgrade go-fdo-client-debugsourceUpgrade opentelemetry-collectorUpgrade go-fdo-server-debugsourceUpgrade osbuild-composer-debuginfoUpgrade go-fdo-serverUpgrade buildah-tests-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade ipp-usb-debuginfoUpgrade image-builder-debuginfoUpgrade go-fdo-clientUpgrade go-fdo-client-debuginfoUpgrade osbuild-composer-debugsourceUpgrade image-builderUpgrade buildahUpgrade go-fdo-server-debuginfoUpgrade osbuild-composer-workerUpgrade buildah-debuginfoUpgrade osbuild-composerUpgrade buildah-testsUpgrade buildah-debugsource | Jun 1, 2026 | May 28, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.2.6 | Aug 20, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub