VDB

RHSA-2026:61314

RHSA-2026:61314 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red Hatregistry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le as a component of Cluster Observability Operator 1.5.0*
Red Hatregistry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le as a component of Cluster Observability Operator 1.5.0*
Red Hatregistry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le as a component of Cluster Observability Operator 1.5.2*
Red Hatregistry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x as a component of Cluster Observability Operator 1.5.2*
Red Hatregistry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 as a component of Cluster Observability Operator 1.5.3*
Red Hatregistry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x as a component of Cluster Observability Operator 1.5.2*
Red Hatregistry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 as a component of Cluster Observability Operator 1.5.3*
Red Hatregistry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 as a component of Cluster Observability Operator 1.5.3*
Red Hatregistry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 as a component of Cluster Observability Operator 1.5.2*, *
Red Hatregistry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x as a component of Cluster Observability Operator 1.5.0*, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le as a component of Cluster Observability Operator 1.5.3*
Red Hatregistry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x as a component of Cluster Observability Operator 1.5.2*, *
Red Hatregistry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le as a component of Cluster Observability Operator 1.5.2*, *
Red Hatregistry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le as a component of Cluster Observability Operator 1.5.3*
Red Hatregistry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 as a component of Cluster Observability Operator 1.5.0*, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x as a component of Cluster Observability Operator 1.5.3*
Red Hatregistry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le as a component of Cluster Observability Operator 1.5.3*
Red Hatregistry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le as a component of Cluster Observability Operator 1.5.0*, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le as a component of Cluster Observability Operator 1.5.0*, *, *
Red Hatregistry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 as a component of Cluster Observability Operator 1.5.2*, *

…and 271 more

Timeline

  • Aug 31, 2026 CVE Published
  • Oct 9, 2026 CVE Updated
  • Oct 9, 2026 Distribution Patch
  • Oct 9, 2026 Distribution Patch
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory
  • Oct 9, 2026 Security Advisory

References

…and 113 more

Open in Interactive Console →
$ Console Community · 50/day Open console ›