go crypto x509

Microsoft’s latest security disclosure around CVE-2026-33810 is the kind of flaw that sounds narrow on paper but can have outsized consequences in real deployments. According to the update guide entry, the issue is a case-sensitive excludedSubtrees name-constraint bypass in crypto/x509, allowing...

Microsoft’s public advisory for CVE-2024-45341 identifies the Azure Linux distribution as a product that “includes this open‑source library and is therefore potentially affected,” but that published attestation is a statement of what Microsoft has validated so far — not proof that no other...