When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opentelemetry-collector | May 27, 2026 | May 19, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade delveUpgrade image-builder-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podmanUpgrade ipp-usb-debuginfoUpgrade go-fdo-serverUpgrade go-fdo-server-rendezvousUpgrade golang-raceUpgrade ignition-debuginfoUpgrade grafana-pcp-debugsourceUpgrade golang-testsUpgrade ignition-validateUpgrade git-lfs-debugsourceUpgrade podman-tests-debuginfoUpgrade go-fdo-client-debugsourceUpgrade osbuild-composer-workerUpgrade yggdrasilUpgrade osbuild-composer-worker-debuginfoUpgrade buildah-debugsourceUpgrade golang-docsUpgrade go-fdo-server-debuginfoUpgrade grafanaUpgrade grafana-debugsourceUpgrade flightctl-servicesUpgrade podman-dockerUpgrade osbuild-composer-debuginfoUpgrade flightctl-agentUpgrade yggdrasil-examples-debuginfoUpgrade podman-remote-debuginfoNo solution existsUpgrade delve-debugsourceUpgrade grafana-selinuxUpgrade rhc-debuginfoUpgrade ignition-debugsourceUpgrade go-fdo-server-manufacturerUpgrade podman-debugsourceUpgrade podman-testsUpgrade flightctl-observabilityUpgrade go-fdo-server-debugsourceUpgrade rhcUpgrade go-fdo-client-debuginfoUpgrade ignitionUpgrade image-builder-debugsourceUpgrade delve-debuginfoUpgrade ignition-validate-debuginfoUpgrade grafana-pcp-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade golangUpgrade go-toolsetUpgrade git-lfsUpgrade osbuild-composerUpgrade podman-debuginfoUpgrade opentelemetry-collectorUpgrade buildahUpgrade golang-binUpgrade yggdrasil-develUpgrade yggdrasil-debugsourceUpgrade flightctl-cliUpgrade ipp-usbUpgrade buildah-testsUpgrade ignition-edgeUpgrade grafana-pcpUpgrade golang-miscUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade rhc-debugsourceUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade osbuild-composer-coreUpgrade buildah-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade podman-remoteUpgrade image-builderUpgrade buildah-tests-debuginfoUpgrade go-fdo-clientUpgrade flightctl-selinuxUpgrade osbuild-composer-core-debuginfoUpgrade yggdrasil-debuginfoUpgrade grafana-debuginfoUpgrade go-fdo-server-ownerUpgrade rhc-worker-playbook-debuginfoUpgrade rhc-worker-playbook | May 20, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade go-fdo-clientUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-workerUpgrade buildah-debugsourceUpgrade osbuild-composerUpgrade buildah-testsUpgrade ipp-usb-debuginfoUpgrade buildah-debuginfoUpgrade image-builderUpgrade go-fdo-client-debuginfoUpgrade osbuild-composer-debugsourceUpgrade go-fdo-server-debuginfoUpgrade buildahUpgrade image-builder-debuginfoUpgrade buildah-tests-debuginfoUpgrade ipp-usbUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade image-builder-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-coreUpgrade go-fdo-server-debugsourceUpgrade go-fdo-client-debugsourceUpgrade opentelemetry-collectorUpgrade go-fdo-serverUpgrade osbuild-composer-debuginfo | Jun 1, 2026 | May 28, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 9.4.14 | Aug 20, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub