ELSA-2026-6949: go-toolset:ol8 security update (IMPORTANT)

ELSA-2026-5942: golang security update (IMPORTANT)

ELSA-2026-5941: golang security update (IMPORTANT)

ELSA-2026-36317: skopeo security update (IMPORTANT)

ELSA-2026-19181: golang security update (IMPORTANT)

ELSA-2026-19126: yggdrasil security update (IMPORTANT)

ELSA-2026-19049: golang-github-openprinting-ipp-usb security update (IMPORTANT)

ELSA-2026-19022: golang security update (IMPORTANT)

ELSA-2026-19017: podman security update (IMPORTANT)

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Inefficient policy validation in crypto/x509

Validating certificate chains which use policies is unexpectedly ineff ...

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls.

Unexpected work during chain building in crypto/x509

During chain building, the amount of work that is done is not correctl ...

Security update for go1.25