Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade skopeo-testsUpgrade udicaUpgrade git-lfsUpgrade delveUpgrade aardvark-dnsUpgrade go-toolsetUpgrade podman-dockerUpgrade libslirp-develUpgrade criu-develUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade critUpgrade cockpit-podmanUpgrade runcUpgrade golang-binUpgrade podman-remoteUpgrade python3-criuUpgrade conmonUpgrade podmanUpgrade skopeoUpgrade netavarkUpgrade criu-libsUpgrade buildahUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade golang-miscUpgrade gvisor-tap-vsockUpgrade podman-testsUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade toolboxUpgrade libslirpUpgrade podman-catatonitUpgrade golang-srcUpgrade golangUpgrade criuUpgrade containers-commonUpgrade podman-pluginsUpgrade golang-tests | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-docsUpgrade golang-binUpgrade golang-shared | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-testsUpgrade golang-docsUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-src | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade go121 | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | May 13, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 1, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 18, 2025 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade gvisor-tap-vsockUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade golang-miscUpgrade python3-podmanUpgrade aardvark-dnsUpgrade buildahUpgrade podman-testsUpgrade golang-binUpgrade podman-catatonitUpgrade netavarkUpgrade podmanUpgrade cockpit-podmanUpgrade udicaUpgrade libslirpUpgrade golang-testsUpgrade golangUpgrade golang-docsUpgrade slirp4netnsUpgrade buildah-testsUpgrade conmonUpgrade critUpgrade criuUpgrade runcUpgrade podman-dockerUpgrade criu-libsUpgrade skopeoUpgrade crunUpgrade criu-develUpgrade git-lfsUpgrade podman-remoteUpgrade golang-srcUpgrade python3-criuUpgrade skopeo-testsUpgrade libslirp-develUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade go-toolsetUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade delve | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade cri-oUpgrade cri-toolsUpgrade golang-github-prometheus-promuUpgrade podmanUpgrade runcUpgrade openshift | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade gvisor-tap-vsock-debuginfoUpgrade critUpgrade criu-debugsourceUpgrade netavarkUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade skopeo-debugsourceUpgrade rhc-worker-scriptUpgrade toolboxUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade gvisor-tap-vsock-debugsourceUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade udicaUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-debuginfoNo solution existsUpgrade podman-pluginsUpgrade golang-binUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-criuUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade criuUpgrade containers-commonUpgrade runcUpgrade skopeoUpgrade aardvark-dnsUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade podman-testsUpgrade golang-miscUpgrade podman-dockerUpgrade crun-debuginfoUpgrade python3-podmanUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade golang-srcUpgrade conmonUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade git-lfs-debugsourceUpgrade golangUpgrade gvisor-tap-vsockUpgrade criu-develUpgrade go-toolsetUpgrade podman-debugsourceUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade git-lfsUpgrade skopeo-debuginfoUpgrade delve-debuginfoUpgrade delveUpgrade libslirpUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade runc-debugsource | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade runcUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade conmon-debuginfoUpgrade critUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade conmonUpgrade go-toolsetUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade libslirpUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade criuUpgrade crunUpgrade git-lfs-debugsourceUpgrade podman-gvproxyUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade delve-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade podman-debugsourceUpgrade libslirp-develUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade netavarkUpgrade criu-develUpgrade toolboxUpgrade libslirp-debuginfoUpgrade golang-binUpgrade golangUpgrade delve-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade criu-debuginfoUpgrade podmanUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade delveUpgrade criu-libsUpgrade skopeoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade git-lfs-debuginfoUpgrade podman-remote-debuginfo | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-opensslUpgrade go1.22-openssl-docUpgrade go1.22-opensslUpgrade go1.21-raceUpgrade go1.21-docUpgrade go1.21-openssl-raceUpgrade go1.22Upgrade go1.21Upgrade go1.21-openssl-docUpgrade go1.22-raceUpgrade go1.22-openssl-raceUpgrade go1.22-doc | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.17-srcUpgrade golang-1.18Upgrade golang-1.21-goUpgrade golang-1.18-goUpgrade golang-1.17Upgrade golang-1.22Upgrade golang-1.22-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.21-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.22-srcUpgrade golang-1.21 | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub