Red Hat Product Errata RHSA-2026:57126 - Security Advisory Issued: 2026-08-19 Updated: 2026-08-19 RHSA-2026:57126 - Security Advisory Overview Updated Packages Synopsis Important: yggdrasil security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for yggdrasil is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker. Security Fix(es): crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2456335 - CVE-2026-33810 crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVEs CVE-2026-33810 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 x86_64 yggdrasil-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: ed4bcd119e8936eee5e845474ec6d0be6c4656d0759f31c9d1beb7b9164a2d43 yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: 6ceb00a7cec33a2e4e7b2fbdea565236a476ff2194730763ac2346a66aa0691b yggdrasil-debugsource-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: fae4e1467d75fcf143e8fd6924e4fff65bf324f04dc1b6c84e652649edd6272e yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: ab48f9a049c1661f9652ba25420d50bfcc294ab83f363546d22c6fde9303736c Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 x86_64 yggdrasil-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: ed4bcd119e8936eee5e845474ec6d0be6c4656d0759f31c9d1beb7b9164a2d43 yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: 6ceb00a7cec33a2e4e7b2fbdea565236a476ff2194730763ac2346a66aa0691b yggdrasil-debugsource-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: fae4e1467d75fcf143e8fd6924e4fff65bf324f04dc1b6c84e652649edd6272e yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: ab48f9a049c1661f9652ba25420d50bfcc294ab83f363546d22c6fde9303736c Red Hat Enterprise Linux for IBM z Systems 10 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 s390x yggdrasil-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: f2dc3449194c7f7857a0fe3c2fd6ebb266d67b14ee5cf022d7650ea23b6385e0 yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: 9092307d48205f98fc459e581f0dac88e45b0bce0aa3ecfc9322c2bb15f6d8d7 yggdrasil-debugsource-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: d7bd4ee446e6b84f95f5baf67fe8c155e01482202857032e8a94a92c389f7f27 yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: 2f4f4beb36ae73c28ab0f5cfb266d419f1dea28a0a3a3deab2a0562617feff2b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 s390x yggdrasil-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: f2dc3449194c7f7857a0fe3c2fd6ebb266d67b14ee5cf022d7650ea23b6385e0 yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: 9092307d48205f98fc459e581f0dac88e45b0bce0aa3ecfc9322c2bb15f6d8d7 yggdrasil-debugsource-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: d7bd4ee446e6b84f95f5baf67fe8c155e01482202857032e8a94a92c389f7f27 yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.s390x.rpm SHA-256: 2f4f4beb36ae73c28ab0f5cfb266d419f1dea28a0a3a3deab2a0562617feff2b Red Hat Enterprise Linux for Power, little endian 10 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 ppc64le yggdrasil-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: 944db14664d836ed5e50c9e833b2b9dbce5a7f1a8d1dabff2ce20e2f92b63c2d yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: 7b58d1f6b0a625af085bf82480a1d2974e1bcf332699e34defd9454329750746 yggdrasil-debugsource-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: b393cbbe376a5eaf9989f4c644923e2671c6be0284ff3f2f7416ad5669588075 yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: 0068befc34c57c3db264ea8da2a06b2e11869c765871897c3cf7ddcab321ee6b Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 ppc64le yggdrasil-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: 944db14664d836ed5e50c9e833b2b9dbce5a7f1a8d1dabff2ce20e2f92b63c2d yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: 7b58d1f6b0a625af085bf82480a1d2974e1bcf332699e34defd9454329750746 yggdrasil-debugsource-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: b393cbbe376a5eaf9989f4c644923e2671c6be0284ff3f2f7416ad5669588075 yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: 0068befc34c57c3db264ea8da2a06b2e11869c765871897c3cf7ddcab321ee6b Red Hat Enterprise Linux for ARM 64 10 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 aarch64 yggdrasil-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: 12906aa861d7468d879919a817985966e33a1df7ae1512b3c6f4bab4ee08a66a yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: ebaeaeebd89d33b8b152b327c273a53913fa809d86090c1f90ee775d0249533a yggdrasil-debugsource-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: 30af404800f45db6fe7884f3f5c18ad907a8cc2d2face9b3696a844448f37be0 yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: 528a835f572199588721c91ebad2d8f896cd7eb7af8dd1cce98a193d1bcab3e7 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM yggdrasil-0.4.9.2-1.el10_2.2.src.rpm SHA-256: d9d1369b97513359086d9a56d570f8f809ecc462cd5d52e6c4b9ed9cf66eb9c7 aarch64 yggdrasil-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: 12906aa861d7468d879919a817985966e33a1df7ae1512b3c6f4bab4ee08a66a yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: ebaeaeebd89d33b8b152b327c273a53913fa809d86090c1f90ee775d0249533a yggdrasil-debugsource-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: 30af404800f45db6fe7884f3f5c18ad907a8cc2d2face9b3696a844448f37be0 yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.aarch64.rpm SHA-256: 528a835f572199588721c91ebad2d8f896cd7eb7af8dd1cce98a193d1bcab3e7 Red Hat CodeReady Linux Builder for x86_64 10 SRPM x86_64 yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: 6ceb00a7cec33a2e4e7b2fbdea565236a476ff2194730763ac2346a66aa0691b yggdrasil-debugsource-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: fae4e1467d75fcf143e8fd6924e4fff65bf324f04dc1b6c84e652649edd6272e yggdrasil-devel-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: a2eb968f14c89b18f17620143419502e6aebc544ff4021f7ee912e6781123c77 yggdrasil-examples-debuginfo-0.4.9.2-1.el10_2.2.x86_64.rpm SHA-256: ab48f9a049c1661f9652ba25420d50bfcc294ab83f363546d22c6fde9303736c Red Hat CodeReady Linux Builder for Power, little endian 10 SRPM ppc64le yggdrasil-debuginfo-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: 7b58d1f6b0a625af085bf82480a1d2974e1bcf332699e34defd9454329750746 yggdrasil-debugsource-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: b393cbbe376a5eaf9989f4c644923e2671c6be0284ff3f2f7416ad5669588075 yggdrasil-devel-0.4.9.2-1.el10_2.2.ppc64le.rpm SHA-256: d47642315864c0bec1dac04ba93d9712308f90fa7fd1ed5745aad7e13acc387a yggdrasil-examples-debuginfo-0.4.9.2-1