Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade slirp4netnsUpgrade criu-develUpgrade python3-criuUpgrade runcUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade udicaUpgrade crunUpgrade podman-remoteUpgrade podman-pluginsUpgrade podmanUpgrade buildah-testsUpgrade skopeo-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade skopeoUpgrade critUpgrade podman-testsUpgrade opentelemetry-collectorUpgrade container-selinuxUpgrade osbuild-composer-workerUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade buildahUpgrade python3-podmanUpgrade aardvark-dnsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade containers-commonUpgrade libslirpUpgrade osbuild-composer-coreUpgrade conmonUpgrade netavark | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade soci-snapshotterUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-testsUpgrade golang-sharedUpgrade containerdUpgrade runfinch-finchUpgrade runcUpgrade dockerUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-docsUpgrade containerd-stressUpgrade golist-debuginfoUpgrade nerdctl-debuginfoUpgrade golang-srcUpgrade golangUpgrade amazon-ecr-credential-helper-debuginfoUpgrade docker-debuginfoUpgrade ecs-initUpgrade golang-miscUpgrade nerdctlUpgrade oci-add-hooksUpgrade golistUpgrade runc-debuginfoUpgrade golang-bin | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade credentials-fetcherUpgrade containerd-stressUpgrade ecs-initUpgrade golangUpgrade rclone-debuginfoUpgrade docker-debugsourceUpgrade rclone-debugsourceUpgrade runfinch-finchUpgrade oci-add-hooks-debuginfoUpgrade golist-debuginfoUpgrade runc-debugsourceUpgrade docker-debuginfoUpgrade rcloneUpgrade runcUpgrade golang-miscUpgrade runc-debuginfoUpgrade golang-sharedUpgrade golang-binUpgrade nerdctlUpgrade golistUpgrade golang-testsUpgrade amazon-ecr-credential-helperUpgrade soci-snapshotterUpgrade oci-add-hooksUpgrade dockerUpgrade golang-srcUpgrade golang-docsUpgrade containerdUpgrade containerd-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade golist-debugsourceUpgrade containerd-stress-debuginfoUpgrade containerd-debugsourceUpgrade amazon-cloudwatch-agent | May 4, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade buildahUpgrade conmon-debugsourceUpgrade netavarkUpgrade python3-criuUpgrade go-fdo-server-debugsourceUpgrade slirp4netnsUpgrade criuUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade go-fdo-client-debuginfoUpgrade osbuild-composerUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade ipp-usbUpgrade podman-tests-debuginfoUpgrade libslirp-debuginfoUpgrade host-metering-debugsourceUpgrade yggdrasil-debugsourceUpgrade osbuild-composer-workerUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade grafana-selinuxUpgrade toolbox-testsUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade yggdrasil-examples-debuginfoUpgrade grafana-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debuginfoUpgrade flightctl-servicesUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade ipp-usb-debuginfoUpgrade delve-debugsourceUpgrade golang-testsUpgrade golang-docsUpgrade grafana-pcp-debugsourceUpgrade fuse-overlayfsUpgrade skopeoUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade cockpit-podmanUpgrade podmanUpgrade libslirp-debugsourceUpgrade grafana-debuginfoUpgrade runc-debugsourceUpgrade go-fdo-server-rendezvousUpgrade grafana-pcp-debuginfoUpgrade go-fdo-clientUpgrade skopeo-debugsourceUpgrade podman-gvproxyUpgrade host-meteringUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-debugsourceUpgrade slirp4netns-debuginfoUpgrade crunUpgrade yggdrasil-debuginfoUpgrade udicaUpgrade golang-binUpgrade runcUpgrade podman-dockerNo solution existsUpgrade osbuild-composer-debuginfoUpgrade podman-remote-debuginfoUpgrade go-fdo-serverUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade yggdrasilUpgrade delve-debuginfoUpgrade go-fdo-server-debuginfoUpgrade buildah-debugsourceUpgrade rhc-develUpgrade aardvark-dnsUpgrade go-toolsetUpgrade flightctl-selinuxUpgrade golang-srcUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade criu-develUpgrade skopeo-testsUpgrade golang-raceUpgrade git-lfs-debuginfoUpgrade go-fdo-client-debugsourceUpgrade git-lfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade image-builder-debuginfoUpgrade podman-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-tests-debuginfoUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade host-metering-selinuxUpgrade flightctl-observabilityUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade rhc-debuginfoUpgrade containers-commonUpgrade golangUpgrade criu-debugsourceUpgrade go-fdo-server-manufacturerUpgrade opentelemetry-collectorUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-coreUpgrade flightctl-agentUpgrade host-metering-debuginfoUpgrade conmonUpgrade git-lfsUpgrade python3-podmanUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade grafana-pcpUpgrade golang-miscUpgrade go-fdo-server-ownerUpgrade libslirpUpgrade rhcUpgrade image-builder-debugsourceUpgrade rhc-debugsourceUpgrade podman-pluginsUpgrade image-builderUpgrade delveUpgrade slirp4netns-debugsourceUpgrade grafanaUpgrade container-selinuxUpgrade flightctl-cliUpgrade yggdrasil-devel | May 20, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade go-fdo-clientUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade delve-debugsourceUpgrade podman-remoteUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade go-fdo-serverUpgrade osbuild-composer-worker-debuginfoUpgrade podman-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade skopeoUpgrade toolbox-debuginfoUpgrade buildahUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade osbuild-composer-workerUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade opentelemetry-collectorUpgrade podman-debuginfoUpgrade yggdrasil-develUpgrade podman-plugins-debuginfoUpgrade osbuild-composerUpgrade yggdrasilUpgrade yggdrasil-debugsourceUpgrade podmanUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade libslirp-develUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-fdo-client-debuginfoUpgrade image-builder-debuginfoUpgrade aardvark-dnsUpgrade criuUpgrade image-builderUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debuginfoUpgrade netavarkUpgrade conmon-debuginfoUpgrade go-fdo-client-debugsourceUpgrade osbuild-composer-coreUpgrade go-fdo-server-debuginfoUpgrade toolbox-testsUpgrade toolboxUpgrade osbuild-composer-debugsourceUpgrade slirp4netnsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade image-builder-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade criu-debuginfoUpgrade yggdrasil-debuginfoUpgrade skopeo-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade skopeo-debugsourceUpgrade delveUpgrade criu-libsUpgrade podman-pluginsUpgrade libslirpUpgrade runc-debuginfoUpgrade podman-tests-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade criu-develUpgrade buildah-debugsourceUpgrade go-fdo-server-debugsourceUpgrade fuse-overlayfsUpgrade podman-testsUpgrade osbuild-composer-debuginfoUpgrade conmon-debugsource | Jun 1, 2026 | May 28, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 9.4.13 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub