Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade ecs-init | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade runcUpgrade captree-debuginfoUpgrade golang-docsUpgrade docker-debugsourceUpgrade libcap-debuginfoUpgrade amazon-ssm-agentUpgrade ecs-initUpgrade cni-pluginsUpgrade cni-plugins-debugsourceUpgrade golang-sharedUpgrade docker-debuginfoUpgrade containerd-debugsourceUpgrade nerdctlUpgrade runc-debuginfoUpgrade cni-plugins-debuginfoUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade libcap-debugsourceUpgrade containerd-stressUpgrade libcapUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade libcap-staticUpgrade libcap-develUpgrade runc-debugsourceUpgrade runfinch-finchUpgrade oci-add-hooksUpgrade golang-srcUpgrade golangUpgrade containerd-stress-debuginfoUpgrade golang-testsUpgrade soci-snapshotterUpgrade golang-miscUpgrade captreeUpgrade golang-binUpgrade docker | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24 | Jul 23, 2026 | Jul 23, 2026 |
| Redhat Openshift | — | Upgrade ose-configmap-reloader-rhel9Upgrade ose-csi-snapshot-controller-rhel9Upgrade ose-csi-node-driver-registrar-rhel9Upgrade ose-csi-livenessprobe-rhel9Upgrade ose-kube-proxy-rhel9Upgrade ose-csi-external-snapshotter-rhel9Upgrade insights-runtime-exporter-rhel9Upgrade ose-cluster-machine-approver-rhel9Upgrade ose-multus-cni-rhel9Upgrade ose-agent-installer-api-server-rhel9Upgrade ose-prometheus-config-reloader-rhel9Upgrade ose-cluster-config-api-rhel9Upgrade ose-network-interface-bond-cni-rhel9Upgrade oc-mirror-plugin-rhel9Upgrade ose-azure-cloud-node-manager-rhel9Upgrade ose-ovn-kubernetes-rhel9Upgrade ose-apiserver-network-proxy-rhel9Upgrade ose-nutanix-cloud-controller-manager-rhel9Upgrade aws-karpenter-provider-aws-rhel9Upgrade azure-kms-encryption-provider-rhel9Upgrade ose-aws-ebs-csi-driver-rhel9-operatorUpgrade ose-machine-api-provider-aws-rhel9Upgrade ose-cluster-dns-rhel9-operatorUpgrade ose-openstack-cinder-csi-driver-rhel9Upgrade ose-cli-artifacts-rhel9Upgrade ose-cluster-samples-rhel9-operatorUpgrade ose-coredns-rhel9Upgrade ose-oauth-apiserver-rhel9Upgrade ose-csi-external-attacher-rhel9Upgrade ose-csi-driver-manila-rhel9-operatorUpgrade ose-cluster-authentication-rhel9-operatorUpgrade ose-vsphere-problem-detector-rhel9Upgrade ose-cluster-ingress-rhel9-operatorUpgrade ose-multus-networkpolicy-rhel9Upgrade ose-agent-installer-orchestrator-rhel9Upgrade openshift-route-controller-manager-rhel9Upgrade ose-ironic-machine-os-downloader-rhel9Upgrade ose-cluster-image-registry-rhel9-operatorUpgrade ose-olm-operator-controller-rhel9Upgrade ose-cluster-olm-rhel9-operatorUpgrade ose-ibmcloud-machine-controllers-rhel9Upgrade ose-pod-rhel9Upgrade ovirt-csi-driver-rhel9Upgrade ose-cluster-etcd-rhel9-operatorUpgrade ose-vsphere-cloud-controller-manager-rhel9Upgrade ose-cluster-config-rhel9-operatorUpgrade ose-hyperkube-rhel9Upgrade ose-powervs-machine-controllers-rhel9Upgrade ose-machine-api-rhel9-operatorUpgrade ose-cluster-monitoring-rhel9-operatorUpgrade ose-baremetal-runtimecfg-rhel9Upgrade ose-azure-file-csi-driver-rhel9Upgrade ose-aws-cloud-controller-manager-rhel9Upgrade ose-azure-workload-identity-webhook-rhel9Upgrade ose-tests-rhel9Upgrade ose-openshift-controller-manager-rhel9Upgrade ose-baremetal-installer-rhel9Upgrade ose-agent-installer-node-agent-rhel9Upgrade ose-aws-cluster-api-controllers-rhel9Upgrade ose-must-gather-rhel9Upgrade ose-aws-pod-identity-webhook-rhel9Upgrade egress-router-cni-rhel9Upgrade openstack-resource-controller-rhel9Upgrade ose-powervs-cloud-controller-manager-rhel9Upgrade ose-agent-installer-ui-rhel9Upgrade insights-runtime-extractor-rhel9Upgrade ose-oauth-proxy-rhel9Upgrade ose-cluster-node-tuning-rhel9-operatorUpgrade ose-service-ca-rhel9-operatorUpgrade ose-container-networking-plugins-rhel9Upgrade ose-azure-file-csi-driver-operator-rhel9Upgrade ose-cluster-bootstrap-rhel9Upgrade ose-ibm-cloud-controller-manager-rhel9Upgrade ose-aws-ebs-csi-driver-rhel9Upgrade ose-operator-framework-tools-rhel9Upgrade ose-network-metrics-daemon-rhel9Upgrade ose-installer-artifacts-rhel9Upgrade ose-cluster-autoscaler-rhel9Upgrade azure-service-rhel9-operatorUpgrade ose-docker-registry-rhel9Upgrade network-tools-rhel9Upgrade ose-ibm-vpc-block-csi-driver-rhel9Upgrade ose-machine-config-rhel9-operatorUpgrade ose-csi-external-provisioner-rhel9Upgrade ose-cluster-network-rhel9-operatorUpgrade ose-nutanix-machine-controllers-rhel9Upgrade ose-operator-marketplace-rhel9Upgrade ose-multus-cni-microshift-rhel9Upgrade kubevirt-csi-driver-rhel9Upgrade ose-cluster-api-rhel9Upgrade ose-oauth-server-rhel9Upgrade ose-agent-installer-csr-approver-rhel9Upgrade ose-gcp-cloud-controller-manager-rhel9Upgrade ose-operator-lifecycle-manager-rhel9Upgrade ose-azure-cloud-controller-manager-rhel9Upgrade ose-ovn-kubernetes-microshift-rhel9Upgrade ose-gcp-pd-csi-driver-rhel9Upgrade ose-multus-route-override-cni-rhel9Upgrade ose-kube-state-metrics-rhel9Upgrade ose-machine-api-provider-gcp-rhel9Upgrade ose-baremetal-rhel9-operatorUpgrade ose-openshift-state-metrics-rhel9Upgrade ose-console-rhel9Upgrade ose-multus-whereabouts-ipam-cni-rhel9Upgrade ose-openstack-cluster-api-controllers-rhel9Upgrade ose-vmware-vsphere-csi-driver-rhel9Upgrade ose-csi-driver-nfs-rhel9Upgrade frr-rhel9Upgrade ose-cluster-capi-rhel9-operatorUpgrade ose-multus-admission-controller-rhel9Upgrade ose-vsphere-cluster-api-controllers-rhel9Upgrade ose-insights-rhel9-operatorUpgrade ose-operator-registry-rhel9Upgrade ose-prometheus-rhel9Upgrade ose-cli-rhel9Upgrade aws-kms-encryption-provider-rhel9Upgrade ose-kube-rbac-proxy-rhel9Upgrade ose-powervs-block-csi-driver-rhel9Upgrade ovirt-csi-driver-rhel9-operatorUpgrade ose-csi-driver-manila-rhel9Upgrade ose-prometheus-rhel9-operatorUpgrade ose-gcp-cluster-api-controllers-rhel9Upgrade ose-baremetal-machine-controllers-rhel9Upgrade ose-etcd-rhel9Upgrade ose-kube-storage-version-migrator-rhel9Upgrade ose-machine-api-provider-azure-rhel9Upgrade ose-cluster-kube-scheduler-rhel9-operatorUpgrade ose-docker-builder-rhel9Upgrade kube-metrics-server-rhel9Upgrade ose-telemeter-rhel9Upgrade ose-cloud-credential-rhel9-operatorUpgrade ose-image-customization-controller-rhel9Upgrade ose-cluster-policy-controller-rhel9Upgrade ose-olm-catalogd-rhel9Upgrade ose-cluster-baremetal-operator-rhel9Upgrade ose-cluster-autoscaler-rhel9-operatorUpgrade ose-agent-installer-utils-rhel9Upgrade ose-openshift-apiserver-rhel9Upgrade ose-libvirt-machine-controllers-rhel9Upgrade ose-csi-external-snapshot-metadata-rhel9Upgrade ose-monitoring-plugin-rhel9Upgrade ose-cluster-kube-apiserver-rhel9-operatorUpgrade ose-cluster-version-rhel9-operatorUpgrade ose-thanos-rhel9Upgrade ose-tools-rhel9Upgrade ose-machine-api-provider-openstack-rhel9Upgrade ose-azure-disk-csi-driver-rhel9-operatorUpgrade ose-cluster-storage-rhel9-operatorUpgrade ose-azure-disk-csi-driver-rhel9Upgrade ose-prom-label-proxy-rhel9Upgrade ose-installer-rhel9Upgrade ose-ibmcloud-cluster-api-controllers-rhel9Upgrade ose-azure-cluster-api-controllers-rhel9Upgrade ose-gcp-pd-csi-driver-operator-rhel9Upgrade cloud-network-config-controller-rhel9Upgrade ose-csi-external-resizer-rhel9Upgrade ose-hypershift-rhel9 | Aug 10, 2026 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-raceUpgrade golang-testsUpgrade go-toolsetUpgrade golang-docsNo solution existsUpgrade golang-bin | Jul 9, 2025 | Jun 11, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24-opensslUpgrade go1.24-raceUpgrade go1.24-openssl-raceUpgrade govulncheck-vulndbUpgrade go1.24-openssl-docUpgrade go1.24Upgrade go1.24-libstdUpgrade go1.24-doc | Dec 5, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub