Skip to content
OpenAdvisories
High ELSA-2026-57126 1 CVE

Important: yggdrasil security update (Oracle Linux 10)

Published Aug 19, 2026 · Updated Aug 19, 2026

Ecosystem: Oracle Linux

Summary

[0.4.9.2-2]
- Rebuild yggdrasil against updated golang

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 yggdrasil 0:0.4.9.2-1.el10_2.2
Oracle Linux · 10 yggdrasil-devel 0:0.4.9.2-1.el10_2.2

Vulnerabilities 1

  • High 7.5
    CVE-2026-33810

    Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

    When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issu…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go