VDB

RHSA-2026%3A9697

RHSA-2026%3A9697 PUBLISHED CVSS 7.5 HIGH

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatregistry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9b8f15505a7ee118ea6e60870a88c9c582ba9227937113347e03e9afdbb91f16_arm64 as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9b8f15505a7ee118ea6e60870a88c9c582ba9227937113347e03e9afdbb91f16_arm64, registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:9b8f15505a7ee118ea6e60870a88c9c582ba9227937113347e03e9afdbb91f16_arm64, *
Red Hatregistry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:06a5d5d82c7db4c32d66438da9d68e3c98020695b719f05eccf383215869105e_s390x as a component of Red Hat OpenShift GitOps 1.18*, registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:06a5d5d82c7db4c32d66438da9d68e3c98020695b719f05eccf383215869105e_s390x
Red Hatregistry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5be0254201b7d2e5a4337876923d43075ca575169a2cce7c9e3e9e1525d0773d_amd64 as a component of Red Hat OpenShift GitOps 1.18*, registry.redhat.io/openshift-gitops-1/gitops-rhel8@sha256:5be0254201b7d2e5a4337876923d43075ca575169a2cce7c9e3e9e1525d0773d_amd64
Red Hatregistry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:e0b9f3902fd2d9117d51e955e58ab46e6fca0af8033fcce4bc860b7aa432c017_amd64 as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:e0b9f3902fd2d9117d51e955e58ab46e6fca0af8033fcce4bc860b7aa432c017_amd64, registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:e0b9f3902fd2d9117d51e955e58ab46e6fca0af8033fcce4bc860b7aa432c017_amd64
Red Hatregistry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d52b043483f248cf812d61fd253c979343881ef1aae94b0096aa9dcd1e0aafbb_s390x as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d52b043483f248cf812d61fd253c979343881ef1aae94b0096aa9dcd1e0aafbb_s390x, registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:d52b043483f248cf812d61fd253c979343881ef1aae94b0096aa9dcd1e0aafbb_s390x
Red Hatregistry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:c7d771a9a408e77b825e95f045a84b7334bec1dfe6d5a307fb62066091ac96d1_arm64 as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:c7d771a9a408e77b825e95f045a84b7334bec1dfe6d5a307fb62066091ac96d1_arm64, registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:c7d771a9a408e77b825e95f045a84b7334bec1dfe6d5a307fb62066091ac96d1_arm64
Red Hatregistry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:76162ab820b06df90cbca62797e3f2ddca3fb1aa527ce469982ae27f01419562_s390x as a component of Red Hat OpenShift GitOps 1.18*, *, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:76162ab820b06df90cbca62797e3f2ddca3fb1aa527ce469982ae27f01419562_s390x
Red Hatregistry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:97d073694ecf9c6b0dcc09707a983a1e1d950a9d0bc4a247b1fd464a66c876c8_ppc64le as a component of Red Hat OpenShift GitOps 1.18*, *, registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:97d073694ecf9c6b0dcc09707a983a1e1d950a9d0bc4a247b1fd464a66c876c8_ppc64le
Red Hatregistry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9dd3efe9a0cc081caf3b7e7cea7e03cc13e6a290c8884a492d8ff505dfb0edcd_s390x as a component of Red Hat OpenShift GitOps 1.18*, registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9dd3efe9a0cc081caf3b7e7cea7e03cc13e6a290c8884a492d8ff505dfb0edcd_s390x, registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:9dd3efe9a0cc081caf3b7e7cea7e03cc13e6a290c8884a492d8ff505dfb0edcd_s390x
Red Hatregistry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7a286bd7aac225e6ef6f5ccefb9b1839fb4cb8c6cd5f0cd1ee79ebb43813211f_ppc64le as a component of Red Hat OpenShift GitOps 1.18*, registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:7a286bd7aac225e6ef6f5ccefb9b1839fb4cb8c6cd5f0cd1ee79ebb43813211f_ppc64le
Red Hatregistry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a824c01bbeca63fa0d7ab3fb5366546beefe9383f02e4546d5ee3fcfb1b791e7_arm64 as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a824c01bbeca63fa0d7ab3fb5366546beefe9383f02e4546d5ee3fcfb1b791e7_arm64, registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a824c01bbeca63fa0d7ab3fb5366546beefe9383f02e4546d5ee3fcfb1b791e7_arm64
Red Hatregistry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e8a5213454b71e952de52bd448d5f52e6de868821a23c15b71c2b46809bdd570_amd64 as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/gitops-operator-bundle@sha256:e8a5213454b71e952de52bd448d5f52e6de868821a23c15b71c2b46809bdd570_amd64, *
Red Hatregistry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:35f009047d38584dcb2216ab3a22a019a94e3f5d2d6047737dd33097dd32ab33_ppc64le as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:35f009047d38584dcb2216ab3a22a019a94e3f5d2d6047737dd33097dd32ab33_ppc64le, registry.redhat.io/openshift-gitops-1/dex-rhel8@sha256:35f009047d38584dcb2216ab3a22a019a94e3f5d2d6047737dd33097dd32ab33_ppc64le
Red Hatregistry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a824c01bbeca63fa0d7ab3fb5366546beefe9383f02e4546d5ee3fcfb1b791e7_arm64 as a component of Red Hat OpenShift GitOps 1.18*, registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a824c01bbeca63fa0d7ab3fb5366546beefe9383f02e4546d5ee3fcfb1b791e7_arm64, registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:a824c01bbeca63fa0d7ab3fb5366546beefe9383f02e4546d5ee3fcfb1b791e7_arm64
Red Hatregistry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b6dc4a8439708052d8e708447944da2cc160a6042b6902e0e9af0e104e823d33_ppc64le as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator@sha256:b6dc4a8439708052d8e708447944da2cc160a6042b6902e0e9af0e104e823d33_ppc64le, *
Red Hatregistry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:68dbbbf7a8123db6abbc46fb4746f7b4bcc8c079c95f28823dde6e7174e247ba_amd64 as a component of Red Hat OpenShift GitOps 1.18*, *, registry.redhat.io/openshift-gitops-1/must-gather-rhel8@sha256:68dbbbf7a8123db6abbc46fb4746f7b4bcc8c079c95f28823dde6e7174e247ba_amd64
Red Hatregistry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:fc8664f60bc08619935ed5133dac7498a7e6f28bb54b5d88184cce1b547a100b_ppc64le as a component of Red Hat OpenShift GitOps 1.18*, registry.redhat.io/openshift-gitops-1/console-plugin-rhel8@sha256:fc8664f60bc08619935ed5133dac7498a7e6f28bb54b5d88184cce1b547a100b_ppc64le
Red Hatregistry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:24e67d1a105be747aee40ce6c616db47f26eb9a74b0f51ddccae545337d5a367_amd64 as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel8@sha256:24e67d1a105be747aee40ce6c616db47f26eb9a74b0f51ddccae545337d5a367_amd64, *, *
Red Hatregistry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d22d2f99b5863f27b31c69e81489cdb4002f53915a9983ede4ec822934533542_ppc64le as a component of Red Hat OpenShift GitOps 1.18*, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel8@sha256:d22d2f99b5863f27b31c69e81489cdb4002f53915a9983ede4ec822934533542_ppc64le
Red Hatregistry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:4285f37ac71f1522cb28b8cea56415eebe7b05f644f83d28246c32b39eb4f98d_amd64 as a component of Red Hat OpenShift GitOps 1.18registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:4285f37ac71f1522cb28b8cea56415eebe7b05f644f83d28246c32b39eb4f98d_amd64, *, registry.redhat.io/openshift-gitops-1/argocd-rhel8@sha256:4285f37ac71f1522cb28b8cea56415eebe7b05f644f83d28246c32b39eb4f98d_amd64

…and 63 more

Timeline

  • Apr 22, 2026 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 19, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›