2456335 – (CVE-2026-33810) CVE-2026-33810 crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

Bug 2456335 (CVE-2026-33810) - CVE-2026-33810 crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

Summary: CVE-2026-33810 crypto/x509: golang: Go crypto/x509: Certificate validation by...

Keywords:
Status:	NEW
Alias:	CVE-2026-33810
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2456853
Blocks:
TreeView+	depends on / blocked

Reported:	2026-04-08 02:01 UTC by OSIDB Bzimport
Modified:	2026-10-09 19:35 UTC (History)
CC List:	166 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2026:14391	None	None	None	2026-05-06 21:10:37 UTC
Red Hat Product Errata	RHSA-2026:19135	None	None	None	2026-05-19 16:07:40 UTC
Red Hat Product Errata	RHSA-2026:19144	None	None	None	2026-05-19 16:09:14 UTC
Red Hat Product Errata	RHSA-2026:19353	None	None	None	2026-05-19 21:39:22 UTC
Red Hat Product Errata	RHSA-2026:19719	None	None	None	2026-05-20 16:41:13 UTC
Red Hat Product Errata	RHSA-2026:19720	None	None	None	2026-05-20 16:53:39 UTC
Red Hat Product Errata	RHSA-2026:19721	None	None	None	2026-05-20 16:48:43 UTC
Red Hat Product Errata	RHSA-2026:36796	None	None	None	2026-07-08 15:50:23 UTC
Red Hat Product Errata	RHSA-2026:39810	None	None	None	2026-07-15 09:54:03 UTC
Red Hat Product Errata	RHSA-2026:54757	None	None	None	2026-08-13 23:39:08 UTC
Red Hat Product Errata	RHSA-2026:57126	None	None	None	2026-08-19 19:38:39 UTC
Red Hat Product Errata	RHSA-2026:59546	None	None	None	2026-08-25 17:46:17 UTC
Red Hat Product Errata	RHSA-2026:61253	None	None	None	2026-08-31 04:07:51 UTC
Red Hat Product Errata	RHSA-2026:61313	None	None	None	2026-08-31 07:45:31 UTC
Red Hat Product Errata	RHSA-2026:61907	None	None	None	2026-09-01 09:03:21 UTC
Red Hat Product Errata	RHSA-2026:62577	None	None	None	2026-09-02 11:06:07 UTC
Red Hat Product Errata	RHSA-2026:62578	None	None	None	2026-09-02 11:29:49 UTC
Red Hat Product Errata	RHSA-2026:63332	None	None	None	2026-09-04 00:43:29 UTC
Red Hat Product Errata	RHSA-2026:65359	None	None	None	2026-09-08 11:34:21 UTC
Red Hat Product Errata	RHSA-2026:65534	None	None	None	2026-09-08 17:06:34 UTC
Red Hat Product Errata	RHSA-2026:65880	None	None	None	2026-09-09 09:44:06 UTC
Red Hat Product Errata	RHSA-2026:65895	None	None	None	2026-09-09 10:49:38 UTC
Red Hat Product Errata	RHSA-2026:66327	None	None	None	2026-09-10 05:33:05 UTC
Red Hat Product Errata	RHSA-2026:67134	None	None	None	2026-09-14 13:39:38 UTC
Red Hat Product Errata	RHSA-2026:67149	None	None	None	2026-09-14 13:34:12 UTC
Red Hat Product Errata	RHSA-2026:67159	None	None	None	2026-09-14 13:39:56 UTC
Red Hat Product Errata	RHSA-2026:67160	None	None	None	2026-09-14 13:32:42 UTC
Red Hat Product Errata	RHSA-2026:67517	None	None	None	2026-09-15 09:24:06 UTC
Red Hat Product Errata	RHSA-2026:67518	None	None	None	2026-09-15 09:38:14 UTC
Red Hat Product Errata	RHSA-2026:68334	None	None	None	2026-09-16 17:20:23 UTC
Red Hat Product Errata	RHSA-2026:68504	None	None	None	2026-09-17 04:32:22 UTC
Red Hat Product Errata	RHSA-2026:69235	None	None	None	2026-09-21 06:31:35 UTC
Red Hat Product Errata	RHSA-2026:70201	None	None	None	2026-09-22 13:57:35 UTC
Red Hat Product Errata	RHSA-2026:76795	None	None	None	2026-10-06 15:28:57 UTC
Red Hat Product Errata	RHSA-2026:76809	None	None	None	2026-10-06 15:08:08 UTC

Description OSIDB Bzimport 2026-04-08 02:01:32 UTC

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Comment 4 errata-xmlrpc 2026-05-06 21:10:30 UTC

This issue has been addressed in the following products:

  Cryostat 4 on RHEL 9

Via RHSA-2026:14391 https://access.redhat.com/errata/RHSA-2026:14391

Comment 6 errata-xmlrpc 2026-05-19 16:07:32 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:19135 https://access.redhat.com/errata/RHSA-2026:19135

Comment 7 errata-xmlrpc 2026-05-19 16:09:06 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:19144 https://access.redhat.com/errata/RHSA-2026:19144

Comment 8 errata-xmlrpc 2026-05-19 21:39:15 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:19353 https://access.redhat.com/errata/RHSA-2026:19353

Comment 9 errata-xmlrpc 2026-05-20 16:41:06 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:19719 https://access.redhat.com/errata/RHSA-2026:19719

Comment 10 errata-xmlrpc 2026-05-20 16:48:36 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:19721 https://access.redhat.com/errata/RHSA-2026:19721

Comment 11 errata-xmlrpc 2026-05-20 16:53:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:19720 https://access.redhat.com/errata/RHSA-2026:19720

Comment 13 errata-xmlrpc 2026-07-08 15:50:14 UTC

This issue has been addressed in the following products:

  RHEM 1.0 for RHEL 9

Via RHSA-2026:36796 https://access.redhat.com/errata/RHSA-2026:36796

Comment 14 errata-xmlrpc 2026-07-15 09:53:56 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Services on OpenShift 18.0

Via RHSA-2026:39810 https://access.redhat.com/errata/RHSA-2026:39810

Comment 17 errata-xmlrpc 2026-08-13 23:39:00 UTC

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 16.2

Via RHSA-2026:54757 https://access.redhat.com/errata/RHSA-2026:54757

Comment 20 errata-xmlrpc 2026-08-19 19:38:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:57126 https://access.redhat.com/errata/RHSA-2026:57126

Comment 21 errata-xmlrpc 2026-08-25 17:46:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:59546 https://access.redhat.com/errata/RHSA-2026:59546

Comment 23 errata-xmlrpc 2026-08-31 04:07:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:61253 https://access.redhat.com/errata/RHSA-2026:61253

Comment 24 errata-xmlrpc 2026-08-31 07:45:24 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:61313 https://access.redhat.com/errata/RHSA-2026:61313

Comment 25 errata-xmlrpc 2026-09-01 09:03:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:61907 https://access.redhat.com/errata/RHSA-2026:61907

Comment 27 errata-xmlrpc 2026-09-02 11:05:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:62577 https://access.redhat.com/errata/RHSA-2026:62577

Comment 28 errata-xmlrpc 2026-09-02 11:29:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:62578 https://access.redhat.com/errata/RHSA-2026:62578

Comment 29 errata-xmlrpc 2026-09-04 00:43:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:63332 https://access.redhat.com/errata/RHSA-2026:63332

Comment 30 errata-xmlrpc 2026-09-08 11:34:13 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:65359 https://access.redhat.com/errata/RHSA-2026:65359

Comment 31 errata-xmlrpc 2026-09-08 17:06:26 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:65534 https://access.redhat.com/errata/RHSA-2026:65534

Comment 32 errata-xmlrpc 2026-09-09 09:43:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:65880 https://access.redhat.com/errata/RHSA-2026:65880

Comment 33 errata-xmlrpc 2026-09-09 10:49:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:65895 https://access.redhat.com/errata/RHSA-2026:65895

Comment 34 errata-xmlrpc 2026-09-10 05:32:57 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:66327 https://access.redhat.com/errata/RHSA-2026:66327

Comment 35 Jon Orris 2026-09-14 13:32:34 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:67160 https://access.redhat.com/errata/RHSA-2026:67160

Comment 36 Jon Orris 2026-09-14 13:34:05 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:67149 https://access.redhat.com/errata/RHSA-2026:67149

Comment 37 Jon Orris 2026-09-14 13:39:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:67134 https://access.redhat.com/errata/RHSA-2026:67134

Comment 38 Jon Orris 2026-09-14 13:39:48 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:67159 https://access.redhat.com/errata/RHSA-2026:67159

Comment 39 Jon Orris 2026-09-15 09:23:58 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:67517 https://access.redhat.com/errata/RHSA-2026:67517

Comment 40 Jon Orris 2026-09-15 09:38:07 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:67518 https://access.redhat.com/errata/RHSA-2026:67518

Comment 41 Jon Orris 2026-09-16 17:20:15 UTC

This issue has been addressed in the following products:

  RHEM 1.1 for RHEL 10
  RHEM 1.1 for RHEL 9

Via RHSA-2026:68334 https://access.redhat.com/errata/RHSA-2026:68334

Comment 42 Jon Orris 2026-09-17 04:32:15 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:68504 https://access.redhat.com/errata/RHSA-2026:68504

Comment 43 Jon Orris 2026-09-21 06:31:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:69235 https://access.redhat.com/errata/RHSA-2026:69235

Comment 44 Jon Orris 2026-09-22 13:57:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:70201 https://access.redhat.com/errata/RHSA-2026:70201

Comment 46 Jon Orris 2026-10-06 15:08:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:76809 https://access.redhat.com/errata/RHSA-2026:76809

Comment 47 Jon Orris 2026-10-06 15:28:50 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:76795 https://access.redhat.com/errata/RHSA-2026:76795

Note You need to log in before you can comment on or make changes to this bug.

aazores
abarbaro
abrianik
akhatavk
akostadi
akoudelk
alcohan
alebedev
alinfoot
alizardo
amasferr
anjoseph
anpicker
ansmith
anthomas
aos-team-art-private
aruklets
asdas
bbrownin
bdettelb
chfoley
ckandaga
cmah
crizzo
dakwon
dhanak
dkeler
dmayorov
doconnor
dpaolell
drosa
dschmidt
dsimansk
dtrifiro
dymurray
eaguilar
ebaron
eborisov
eglynn
ehelms
erezende
fdeutsch
gbenhaim
ggainey
ggrzybek
gparvin
hasun
ibolton
ikhan
jbalunas
jbritton
jburrell
jcantril
jchui
jdelft
jeder
jfula
jhe
jjoyce
jkoehler
jlanda
jlledo
jmatsuok
jmatthew
jmontleo
jolong
jowilson
jpasqual
jprabhak
jpretori
jraez
jschluet
jtolenti
jturenov
jupierce
juwatts
kingland
kshier
ktsao
kverlaen
lball
lbragsta
lchilton
lgamliel
lgarciaa
lhh
lphiri
manissin
mbiarnes
mbocek
mburns
mdellweg
mgarciac
mhulan
mnovotny
mrunge
mwringe
nboldt
ngough
niyer
nmoumoul
nyancey
oaljalju
ometelka
oramraz
osousa
pahickey
pantinor
parichar
pcreech
peholase
pgaikwad
pjindal
ppalepu
ppostler
prdhamdh
psrna
ptisnovs
pvasanth
rbobbitt
rbryant
rchan
rekumar
rfreiman
rgodfrey
rhaigner
rhel-process-autobot
rjohnson
rojacob
sakbas
sausingh
sbratsla
sdawley
sfeifer
sghai
sidsharm
simaishi
slucidi
smallamp
smcdonal
smullick
sseago
stcannon
stirabos
suppawar
swoodman
syedriko
tasato
teagle
thason
tmalecek
tsedmik
tsze
twaugh
veshanka
vimartin
vkarehfa
vlaad
vvoronko
watson-tool-maintainers
weaton
wenshen
whayutin
wtam
xdharmai
yguenane