7.5
High
CVE-2026-27137 When verifying a certificate chain which contains a certificate containing multiple email address constraints which…
Description
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenStack Platform 17.1 | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| DevWorkspace Operator 0.4 1776457293 | earliest → < 1776457293 | 1776457293 |
| Logging Subsystem for Red Hat OpenShift 6.0 1781192891 | earliest → < 1781192891 | 1781192891 |
| Logging Subsystem for Red Hat OpenShift 6.2 1776800087 | earliest → < 1776800087 | 1776800087 |
| Logging Subsystem for Red Hat OpenShift 6.4 1780051640 | earliest → < 1780051640 | 1780051640 |
Show the 131 other branches Hide the 131 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Multicluster Global Hub 1.3.4 1779210675 | earliest → < 1779210675 | 1779210675 |
| Multicluster Global Hub 1.4.5 1779838819 | earliest → < 1779838819 | 1779838819 |
| Multicluster Global Hub 1.5.4 1779828691 | earliest → < 1779828691 | 1779828691 |
| Multicluster Global Hub 1.5.4 1773650627 | earliest → < 1773650627 | 1773650627 |
| Multicluster Global Hub 1.6.2 1780320809 | earliest → < 1780320809 | 1780320809 |
| OpenShift API for Data Protection 1.4 1779809598 | earliest → < 1779809598 | 1779809598 |
| OpenShift API for Data Protection 1.5 1779808027 | earliest → < 1779808027 | 1779808027 |
| Red Hat Advanced Cluster Management for Kubernetes 2.15 1774085848 | earliest → < 1774085848 | 1774085848 |
| Red Hat Ansible Automation Platform 2.6 1777391542 | earliest → < 1777391542 | 1777391542 |
| Red Hat Hardened Images 1.26 | earliest → < 1.26.2-1.hum1 | 1.26.2-1.hum1 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1 1.0 | earliest → < 1.0.2-1776288486 | 1.0.2-1776288486 |
| Red Hat OpenShift AI 2.25 1776773362 | earliest → < 1776773362 | 1776773362 |
| Red Hat OpenShift Builds 1.6.5 1774334066 | earliest → < 1774334066 | 1774334066 |
| Red Hat OpenShift Builds 1.7.3 1776846936 | earliest → < 1776846936 | 1776846936 |
| Red Hat OpenShift Dev Spaces 3.27 1776789889 | earliest → < 1776789889 | 1776789889 |
| Red Hat OpenShift GitOps 1.18 1776755965 | earliest → < 1776755965 | 1776755965 |
| Red Hat OpenShift GitOps 1.19 1776767162 | earliest → < 1776767162 | 1776767162 |
| Red Hat OpenShift GitOps 1.2 1776773421 | earliest → < 1776773421 | 1776773421 |
| Red Hat OpenShift distributed tracing 3.9.3 1776435680 | earliest → < 1776435680 | 1776435680 |
| Red Hat Quay 3.16 1779204086 | earliest → < 1779204086 | 1779204086 |
| Red Hat Satellite 6.18 1778082595 | earliest → < 1778082595 | 1778082595 |
| Red Hat Trusted Artifact Signer 1.3 1776339099 | earliest → < 1776339099 | 1776339099 |
| Red Hat Web Terminal 1.11 1776966691 | earliest → < 1776966691 | 1776966691 |
| Red Hat Web Terminal 1.12 1776959849 | earliest → < 1776959849 | 1776959849 |
| Red Hat Web Terminal 1.13 1776197785 | earliest → < 1776197785 | 1776197785 |
| Red Hat Web Terminal 1.14 1776199398 | earliest → < 1776199398 | 1776199398 |
| Red Hat Web Terminal 1.15 1775672762 | earliest → < 1775672762 | 1775672762 |
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Versions not published | |
| Confidential Compute Attestation | Versions not published | |
| Deployment Validation Operator | Versions not published | |
| ExternalDNS Operator | Versions not published | |
| Fence Agents Remediation Operator | Versions not published | |
| Gatekeeper 3 | Versions not published | |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| Logical Volume Manager Storage | Versions not published | |
| Migration Toolkit for Applications 8 | Versions not published | |
| Migration Toolkit for Containers | Versions not published | |
| mirror registry for Red Hat OpenShift | Versions not published | |
| OpenShift Developer Tools and Services | Versions not published | |
| OpenShift Lightspeed | Versions not published | |
| OpenShift Pipelines | Versions not published | |
| OpenShift Serverless | Versions not published | |
| Red Hat 3scale API Management Platform 2 | Versions not published | |
| Red Hat build of Apache Camel - HawtIO 4 | Versions not published | |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Connectivity Link 1 | Versions not published | |
| Red Hat Developer Hub | Versions not published | |
| Red Hat Edge Manager 1 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat OpenShift Cluster Manager CLI | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat Openshift Data Foundation 4 | Versions not published | |
| Red Hat OpenShift on AWS | Versions not published | |
| Red Hat OpenStack Platform 16.2 | Versions not published | |
| Red Hat OpenStack Platform 18.0 | Versions not published | |
| Red Hat Quay 3 | Versions not published | |
| Red Hat Satellite 6 | Versions not published | |
| streams for Apache Kafka 3 | Versions not published | |
| Zero Trust Workload Identity Manager | Versions not published | |
| Zero Trust Workload Identity Manager - Tech Preview | Versions not published | |
| cert-manager Operator for Red Hat OpenShift | Versions not published | |
| Compliance Operator | Versions not published | |
| Cryostat 4 | Versions not published | |
| Custom Metric Autoscaler operator for Red Hat Openshift | Versions not published | |
| External Secrets Operator for Red Hat OpenShift | Versions not published | |
| File Integrity Operator | Versions not published | |
| Machine Deletion Remediation Operator | Versions not published | |
| mirror registry for Red Hat OpenShift 2 | Versions not published | |
| Multicluster Engine for Kubernetes | Versions not published | |
| Network Observability Operator | Versions not published | |
| Node HealthCheck Operator | Versions not published | |
| OpenShift Service Mesh 2 | Versions not published | |
| OpenShift Service Mesh 3 | Versions not published | |
| Power monitoring for Red Hat OpenShift | Versions not published | |
| Red Hat Advanced Cluster Security 4 | Versions not published | |
| Red Hat Ansible Automation Platform 2 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat OpenShift for Windows Containers | Versions not published | |
| Red Hat OpenShift Virtualization 4 | Versions not published | |
| Red Hat Service Interconnect 1 | Versions not published | |
| Red Hat Service Interconnect 2 | Versions not published | |
| Security Profiles Operator | Versions not published | |
| Service Telemetry Framework 1.5 | Versions not published | |
| crypto/x509 1.26 | 1.26.0-0 → < 1.26.1 | 1.26.1 |
| Red Hat OpenShift GitOps 1.20 1776773421 | earliest → < 1776773421 | 1776773421 |
| Red Hat OpenShift Builds 1.7.4 1776846936 | earliest → < 1776846936 | 1776846936 |
| RHEM 1.0 for RHEL 9 | Versions not published | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.6 Extended Update Support | Versions not published | |
| Red Hat OpenStack Platform 17.1 for RHEL 9 | Versions not published | |
| Red Hat OpenStack Services on OpenShift 18.0 | Versions not published | |
| RHEM 1.1 for RHEL 10 | Versions not published | |
| RHEM 1.1 for RHEL 9 | Versions not published | |
| Builds for Red Hat OpenShift 1.6.0 1774334066 | earliest → < 1774334066 | 1774334066 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 1.0 | earliest → < 1.0.2-1776288486 | 1.0.2-1776288486 |
| Red Hat multicluster global hub 1.4.3 1779838819 | earliest → < 1779838819 | 1779838819 |
| Red Hat OpenShift Builds 1.7.1 1776846936 | earliest → < 1776846936 | 1776846936 |
| Logging for Red Hat OpenShift 6.0 1781192891 | earliest → < 1781192891 | 1781192891 |
| Logging for Red Hat OpenShift 6.2 1776800087 | earliest → < 1776800087 | 1776800087 |
| Red Hat Migration Toolkit 1.8 1783914276 | earliest → < 1783914276 | 1783914276 |
| Red Hat multicluster global hub 1.5.2 1779828691 | earliest → < 1779828691 | 1779828691 |
| Red Hat multicluster global hub 1.5.2 1773650627 | earliest → < 1773650627 | 1773650627 |
| Red Hat OpenShift distributed tracing 3.9.1 1776435680 | earliest → < 1776435680 | 1776435680 |
| Multicluster Global Hub 1.5.6 1779828691 | earliest → < 1779828691 | 1779828691 |
| Multicluster Global Hub 1.5.6 1773650627 | earliest → < 1773650627 | 1773650627 |
| Multicluster Global Hub 1.6.4 1780320809 | earliest → < 1780320809 | 1780320809 |
| Logging for Red Hat OpenShift 6.4 1780051640 | earliest → < 1780051640 | 1780051640 |
| Logging Subsystem for Red Hat OpenShift 6 1781192891 | earliest → < 1781192891 | 1781192891 |
| Red Hat multicluster global hub 1.5.0 1779828691 | earliest → < 1779828691 | 1779828691 |
| Red Hat multicluster global hub 1.5.0 1773650627 | earliest → < 1773650627 | 1773650627 |
| Red Hat multicluster global hub 1.4.4 1779838819 | earliest → < 1779838819 | 1779838819 |
| Red Hat multicluster global hub 1.6.0 1780320809 | earliest → < 1780320809 | 1780320809 |
| Red Hat OpenShift distributed tracing 3.9.2 1776435680 | earliest → < 1776435680 | 1776435680 |
| Multicluster Global Hub 1.5.7 1779828691 | earliest → < 1779828691 | 1779828691 |
| Multicluster Global Hub 1.5.7 1773650627 | earliest → < 1773650627 | 1773650627 |
| Multicluster Global Hub 1.6.5 1780320809 | earliest → < 1780320809 | 1780320809 |
| Builds for Red Hat OpenShift 1.6.1 1774334066 | earliest → < 1774334066 | 1774334066 |
| Red Hat multicluster global hub 1.4.2 1779838819 | earliest → < 1779838819 | 1779838819 |
| Red Hat multicluster global hub 1.5.1 1779828691 | earliest → < 1779828691 | 1779828691 |
| Red Hat multicluster global hub 1.5.1 1773650627 | earliest → < 1773650627 | 1773650627 |
| Red Hat Migration Toolkit for Containers 1.8 1783914276 | earliest → < 1783914276 | 1783914276 |
| Red Hat OpenShift Builds 1.6.4 1774334066 | earliest → < 1774334066 | 1774334066 |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat multicluster global hub 1.5.3 1779828691 | earliest → < 1779828691 | 1779828691 |
| Red Hat multicluster global hub 1.5.3 1773650627 | earliest → < 1773650627 | 1773650627 |
| Logging for Red Hat OpenShift 6 1781192891 | earliest → < 1781192891 | 1781192891 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenStack Platform 17.1
The 74 CVEs of Red Hat OpenStack Platform 17.1 →
CVE-2026-92982
A flaw was found in Ansible Operator Plugins
8.5
High
CVE-2026-89091
Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
8.8
High
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
High
CVE-2026-92091
Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array
5.9
Medium