When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opentelemetry-collector | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade goUpgrade rclone | Apr 13, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade osbuild-composerUpgrade rhc-worker-playbookUpgrade go-fdo-server-ownerUpgrade rhc-worker-playbook-debuginfoUpgrade go-toolsetUpgrade git-lfsUpgrade osbuild-composer-tests-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade golangUpgrade grafana-debuginfoUpgrade grafana-pcp-debuginfoUpgrade buildah-testsUpgrade image-builderUpgrade grafana-pcpUpgrade yggdrasil-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade podman-debuginfoUpgrade git-lfs-debuginfoUpgrade delve-debuginfoUpgrade golang-srcUpgrade flightctl-cliUpgrade rhc-debugsourceUpgrade yggdrasil-debugsourceUpgrade ignition-edgeUpgrade golang-binUpgrade ipp-usbUpgrade yggdrasil-develUpgrade ignitionUpgrade go-fdo-clientUpgrade ignition-validate-debuginfoUpgrade flightctl-selinuxUpgrade opentelemetry-collectorUpgrade buildah-tests-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade image-builder-debugsourceUpgrade buildahUpgrade grafanaUpgrade grafana-pcp-debugsourceUpgrade golang-testsUpgrade buildah-debugsourceUpgrade podman-tests-debuginfoUpgrade golang-raceUpgrade go-fdo-serverUpgrade podman-debugsourceUpgrade ignition-validateUpgrade go-fdo-server-debuginfoUpgrade podman-remote-debuginfoUpgrade podmanUpgrade git-lfs-debugsourceUpgrade flightctl-agentUpgrade image-builder-debuginfoUpgrade grafana-debugsourceUpgrade podman-dockerUpgrade osbuild-composer-debuginfoUpgrade delveUpgrade podman-testsUpgrade go-fdo-server-debugsourceUpgrade go-fdo-client-debugsourceUpgrade flightctl-observabilityUpgrade grafana-selinuxUpgrade rhc-debuginfoUpgrade rhcUpgrade ipp-usb-debuginfoUpgrade go-fdo-server-rendezvousUpgrade yggdrasilUpgrade go-fdo-server-manufacturerUpgrade flightctl-servicesUpgrade go-fdo-client-debuginfoUpgrade delve-debugsourceNo solution existsUpgrade yggdrasil-examples-debuginfoUpgrade osbuild-composer-debugsourceUpgrade ignition-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade ignition-debuginfoUpgrade golang-docs | May 20, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade go-fdo-clientUpgrade buildah-debugsourceUpgrade image-builder-debuginfoUpgrade osbuild-composer-debugsourceUpgrade buildah-debuginfoUpgrade ipp-usb-debuginfoUpgrade osbuild-composerUpgrade image-builderUpgrade go-fdo-server-debuginfoUpgrade buildahUpgrade go-fdo-client-debuginfoUpgrade buildah-testsUpgrade osbuild-composer-workerUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debuginfoUpgrade go-fdo-server-debugsourceUpgrade osbuild-composer-coreUpgrade go-fdo-client-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade ipp-usbUpgrade image-builder-debugsourceUpgrade opentelemetry-collectorUpgrade go-fdo-serverUpgrade buildah-tests-debuginfo | Jun 1, 2026 | May 28, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.2.6 | Aug 20, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub