THREATIST.IORead the docs Logging for Red Hat OpenShift - 6.4.5
Released 2026-06-03 · Red Hat rating Important · View on Red Hat →
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol.
lz4_flex is a pure Rust implementation of LZ4 compression/decompression.
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.