9.1
Critical
CVE-2026-42508 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation
Description
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| golang.org/x/crypto/ssh/knownhosts 0.52 | earliest → < 0.52.0 | 0.52.0 |
| Red Hat Hardened Images 1.26 | earliest → < 1.26.4-2.hum1 | 1.26.4-2.hum1 |
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Versions not published | |
| Builds for Red Hat OpenShift | Versions not published | |
| External Secrets Operator for Red Hat OpenShift | Versions not published | |
| Multicluster Engine for Kubernetes | Versions not published | |
| OpenShift API for Data Protection | Versions not published | |
| OpenShift Serverless | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions not published |
Show the 76 other branches Hide the 76 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Advanced Cluster Security 4 | Versions not published | |
| Red Hat Ceph Storage 9 | Versions not published | |
| Red Hat Edge Manager 1 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat Openshift Data Foundation 4 | Versions not published | |
| Red Hat OpenShift Dev Workspaces Operator | Versions not published | |
| Red Hat OpenShift GitOps | Versions not published | |
| Red Hat OpenShift Virtualization 4 | Versions not published | |
| Red Hat OpenStack Platform 16.2 | Versions not published | |
| Red Hat Quay 3 | Versions not published | |
| Red Hat Trusted Artifact Signer | Versions not published | |
| Red Hat OpenStack Platform 17.1 | Versions not published | |
| Red Hat OpenStack Platform 18.0 | Versions not published | |
| Red Hat Advanced Cluster Security for Kubernetes 4.10 1781686458 | earliest → < 1781686458 | 1781686458 |
| Red Hat Advanced Cluster Security for Kubernetes 4.9 1781686446 | earliest → < 1781686446 | 1781686446 |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat OpenShift Builds 1.7.4 1783057868 | earliest → < 1783057868 | 1783057868 |
| RHEM 1.0 for RHEL 9 | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Versions not published | |
| DevWorkspace Operator 0.42 1782401674 | earliest → < 1782401674 | 1782401674 |
| Red Hat Edge Manager 1.0 1783502025 | earliest → < 1783502025 | 1783502025 |
| Red Hat Trusted Artifact Signer 1.4 4 | earliest → < 4-1.4.2 | 4-1.4.2 |
| Red Hat Openshift Data Foundation 4.22 1782934284 | earliest → < 1782934284 | 1782934284 |
| Red Hat Advanced Cluster Management for Kubernetes 2.11 1783813250 | earliest → < 1783813250 | 1783813250 |
| Red Hat Edge Manager 1.1 1784126780 | earliest → < 1784126780 | 1784126780 |
| Red Hat Quay 3.9 1784125838 | earliest → < 1784125838 | 1784125838 |
| RHEM 1.1 for RHEL 10 | Versions not published | |
| RHEM 1.1 for RHEL 9 | Versions not published | |
| Red Hat OpenShift Builds 1.8.1 1783612119 | earliest → < 1783612119 | 1783612119 |
| Red Hat Quay 3.10 1783750447 | earliest → < 1783750447 | 1783750447 |
| Red Hat Quay 3.16 1783955846 | earliest → < 1783955846 | 1783955846 |
| Red Hat Advanced Cluster Security 4.9 1781686446 | earliest → < 1781686446 | 1781686446 |
| Red Hat OpenShift Builds 1.7.1 1783057868 | earliest → < 1783057868 | 1783057868 |
| Red Hat Quay 3.1 1783750447 | earliest → < 1783750447 | 1783750447 |
| Red Hat Quay 3.12 1784353904 | earliest → < 1784353904 | 1784353904 |
| Red Hat Quay 3.12 1783751865 | earliest → < 1783751865 | 1783751865 |
| Red Hat Quay 3.15 1784351966 | earliest → < 1784351966 | 1784351966 |
| OpenShift API for Data Protection 1.6 1784058822 | earliest → < 1784058822 | 1784058822 |
| multicluster engine for Kubernetes 2.10 1784646026 | earliest → < 1784646026 | 1784646026 |
| Red Hat OpenShift Builds 1.8.0 1783612119 | earliest → < 1783612119 | 1783612119 |
| multicluster engine for Kubernetes 2.8 1784646786 | earliest → < 1784646786 | 1784646786 |
| Red Hat Advanced Cluster Management for Kubernetes 2.13 1784740143 | earliest → < 1784740143 | 1784740143 |
| Red Hat OpenShift Builds 1.7.3 1783057868 | earliest → < 1783057868 | 1783057868 |
| multicluster engine for Kubernetes 2.1 1784646026 | earliest → < 1784646026 | 1784646026 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260721142025.63 | earliest → < 8080020260721142025.63b34585 | 8080020260721142025.63b34585 |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260721142025.63 | earliest → < 8080020260721142025.63b34585 | 8080020260721142025.63b34585 |
| OpenShift API for Data Protection 1.3 1785177359 | earliest → < 1785177359 | 1785177359 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260803064027 | earliest → < 8060020260803064027.ad008a3a | 8060020260803064027.ad008a3a |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 8060020260803064027 | earliest → < 8060020260803064027.ad008a3a | 8060020260803064027.ad008a3a |
| Red Hat OpenShift GitOps 1.19 1785149260 | earliest → < 1785149260 | 1785149260 |
| Red Hat OpenShift GitOps 1.20 1785211346 | earliest → < 1785211346 | 1785211346 |
| Red Hat Advanced Cluster Management for Kubernetes 2.16 1786456658 | earliest → < 1786456658 | 1786456658 |
| Red Hat OpenShift GitOps 1.2 1785211346 | earliest → < 1785211346 | 1785211346 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Versions not published | |
| multicluster engine for Kubernetes 2.11 1786912006 | earliest → < 1786912006 | 1786912006 |
| OpenShift API for Data Protection 1.4 1786946294 | earliest → < 1786946294 | 1786946294 |
| Red Hat OpenShift AI 3.4 1787001948 | earliest → < 1787001948 | 1787001948 |
| cert-manager Operator for Red Hat OpenShift | Versions not published | |
| ExternalDNS Operator | Versions not published | |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| OpenShift Pipelines | Versions not published | |
| Cluster Observability Operator 1.5.2 1787593637 | earliest → < 1787593637 | 1787593637 |
| Cluster Observability Operator 1.5.0 1787593637 | earliest → < 1787593637 | 1787593637 |
| Red Hat OpenShift AI 2.25 1788181054 | earliest → < 1788181054 | 1788181054 |
| Logging Subsystem for Red Hat OpenShift 6.6 1788439505 | earliest → < 1788439505 | 1788439505 |
| OpenShift API for Data Protection 1.5 1788859896 | earliest → < 1788859896 | 1788859896 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified