RHSA-2026:67134 — Red Hat Security Advisory: yggdrasil security update
When Go's (golang) crypto/x509 package verifies a certificate chain, excluded DNS constraints are not correctly applied to wildcard DNS Subject Alternative Names when the SAN's case differs from the constraint.
CERT24