Post

The part a browser or OS trust-store update does not cover: plenty of non-browser clients never check revocation. Red Hat RHSB-2026-012 ships an updated CA bundle - and anything that bakes a bundle into a container image needs rebuilding, not restarting.