CVE-2026-42508

EUVD-2026-31399
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 44.66%
Affected Products (NVD)
VendorProductVersion
golangcrypto
𝑥
< 0.52.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
7:5.8.2-4.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
8100020260701102925.afee755d ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
8060020260803064027.ad008a3a ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
8060020260803064027.ad008a3a ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
8080020260721142025.63b34585 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
8080020260721142025.63b34585 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
6:5.8.2-4.el9_8 ≤
𝑥
< *
ADP
Red HatRHEM 1.0 for RHEL 9
0:1.0.3-1.el9em ≤
𝑥
< *
ADP
Red HatRHEM 1.1 for RHEL 10
0:1.1.3-1.el10em ≤
𝑥
< *
ADP
Red HatRHEM 1.1 for RHEL 9
0:1.1.3-1.el9em ≤
𝑥
< *
ADP
Red HatDevWorkspace Operator 0.42
1782401674 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.10
1784646026 ≤
𝑥
< *
ADP
Red Hatmulticluster engine for Kubernetes 2.8
1784646786 ≤
𝑥
< *
ADP
Red HatOpenShift API for Data Protection 1.3
1785177359 ≤
𝑥
< *
ADP
Red HatOpenShift API for Data Protection 1.6
1784058822 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.11
1783813250 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.13
1784740143 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.16
1786456658 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security 4.9
1781686446 ≤
𝑥
< *
ADP
Red HatRed Hat Advanced Cluster Security for Kubernetes 4.10
1781686458 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.0
1783502025 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784196588 ≤
𝑥
< *
ADP
Red HatRed Hat Edge Manager 1.1
1784126780 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
1.25.11-2.hum1 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
1.26.4-2.hum1 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.7.4
1783057868 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.8.1
1784121108 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Builds 1.8.1
1783612119 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932114 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782931768 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932104 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783536000 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783535989 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783536515 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932521 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783018461 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783018421 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932812 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537001 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932919 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537586 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782932969 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933015 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933042 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537392 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933235 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933251 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537955 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933417 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783537742 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782933602 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1783019377 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782934054 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782934036 ≤
𝑥
< *
ADP
Red HatRed Hat Openshift Data Foundation 4.22
1782934284 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.19
1785149260 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift GitOps 1.2
1785211346 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.1
1783750447 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.12
1783751865 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.12
1784353904 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.15
1784351966 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.16
1783955846 ≤
𝑥
< *
ADP
Red HatRed Hat Quay 3.9
1784125838 ≤
𝑥
< *
ADP
Red HatRed Hat Trusted Artifact Signer 1.4
4-1.4.2 ≤
𝑥
< *
ADP
Red HatRed Hat Trusted Artifact Signer 1.4
4-1.4.3 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
golang-go.crypto
bookworm
postponed
bullseye
postponed
forky
1:0.55.0-1
fixed
sid
1:0.55.0-1
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
golang-go.crypto
bionic
Fixed 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm2
released
focal
Fixed 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm2
released
jammy
Fixed 1:0.0~git20211202.5770296-1ubuntu0.1~esm2
released
noble
Fixed 1:0.19.0-1ubuntu0.1~esm2
released
questing
ignored
resolute
Fixed 1:0.47.0-1ubuntu0.1~esm1
released
xenial
not-affected
snapd
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
xenial
needs-triage
lxd
bionic
Fixed 3.0.3-0ubuntu1~18.04.2+esm3
released
focal
not-affected
jammy
dne
noble
dne
questing
dne
resolute
dne
xenial
Fixed 2.0.11-0ubuntu1~16.04.4+esm3
released
google-guest-agent
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
questing
not-affected
resolute
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
alloy
suse enterprise desktop 15 SP7
1.17.1-150700.15.23.1
fixed
suse enterprise sap 15 SP7
1.17.1-150700.15.23.1
fixed
suse enterprise server 15 SP7
1.17.1-150700.15.23.1
fixed
amazon-ssm-agent
suse enterprise sap 15 SP4
3.3.4624.0-150000.5.37.1
fixed
suse enterprise sap 15 SP5
3.3.4624.0-150000.5.37.1
fixed
suse enterprise sap 15 SP6
3.3.4624.0-150000.5.37.1
fixed
suse enterprise sap 15 SP7
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP4
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP5
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP6
3.3.4624.0-150000.5.37.1
fixed
suse enterprise server 15 SP7
3.3.4624.0-150000.5.37.1
fixed
apptainer
suse enterprise server 15 SP6
1.5.1-150600.4.24.1
fixed
apptainer-sle15_6
suse enterprise server 15 SP6
1.5.1-150600.4.24.1
fixed
buildah
suse enterprise sap 15 SP7
1.35.5-150500.3.62.1
fixed
suse enterprise server 15 SP4
1.35.5-150400.3.68.1
fixed
suse enterprise server 15 SP5
1.35.5-150500.3.62.1
fixed
suse enterprise server 15 SP6
1.35.5-150500.3.62.1
fixed
suse enterprise server 15 SP7
1.35.5-150500.3.62.1
fixed
cosign
suse enterprise desktop 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise sap 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP4
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP5
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP6
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP7
3.1.1-150400.3.45.1
fixed
cosign-bash-completion
suse enterprise desktop 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise sap 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP7
3.1.1-150400.3.45.1
fixed
cosign-zsh-completion
suse enterprise desktop 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise sap 15 SP7
3.1.1-150400.3.45.1
fixed
suse enterprise server 15 SP7
3.1.1-150400.3.45.1
fixed
google-guest-agent
suse enterprise sap 15 SP4
20260529.00-150000.1.70.1
fixed
suse enterprise sap 15 SP5
20260529.00-150000.1.70.1
fixed
suse enterprise sap 15 SP6
20260529.00-150000.1.70.1
fixed
suse enterprise sap 15 SP7
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP4
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP5
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP6
20260529.00-150000.1.70.1
fixed
suse enterprise server 15 SP7
20260529.00-150000.1.70.1
fixed
google-osconfig-agent
suse enterprise sap 15 SP4
20260615.01-150000.1.55.1
fixed
suse enterprise sap 15 SP5
20260615.01-150000.1.55.1
fixed
suse enterprise sap 15 SP6
20260615.01-150000.1.55.1
fixed
suse enterprise sap 15 SP7
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP4
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP5
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP6
20260615.01-150000.1.55.1
fixed
suse enterprise server 15 SP7
20260615.01-150000.1.55.1
fixed
kubevirt-manifests
suse enterprise sap 15 SP7
1.7.4-150700.3.30.1
fixed
suse enterprise server 15 SP7
1.7.4-150700.3.30.1
fixed
kubevirt-virtctl
suse enterprise sap 15 SP7
1.7.4-150700.3.30.1
fixed
suse enterprise server 15 SP7
1.7.4-150700.3.30.1
fixed
podman
suse enterprise sap 15 SP7
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP4
4.9.5-150400.4.74.2
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.73.2
fixed
podman-docker
suse enterprise sap 15 SP7
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP4
4.9.5-150400.4.74.2
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.73.2
fixed
podman-remote
suse enterprise sap 15 SP7
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP4
4.9.5-150400.4.74.2
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.73.2
fixed
podmansh
suse enterprise sap 15 SP7
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP5
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP6
4.9.5-150500.3.73.2
fixed
suse enterprise server 15 SP7
4.9.5-150500.3.73.2
fixed
terraform-provider-aws
suse enterprise sap 15 SP4
3.11.0-150200.6.18.1
fixed
suse enterprise sap 15 SP5
3.11.0-150200.6.18.1
fixed
suse enterprise server 15 SP4
3.11.0-150200.6.18.1
fixed
suse enterprise server 15 SP5
3.11.0-150200.6.18.1
fixed
terraform-provider-azurerm
suse enterprise sap 15 SP4
2.32.0-150200.6.12.1
fixed
suse enterprise sap 15 SP5
2.32.0-150200.6.12.1
fixed
suse enterprise server 15 SP4
2.32.0-150200.6.12.1
fixed
suse enterprise server 15 SP5
2.32.0-150200.6.12.1
fixed
terraform-provider-external
suse enterprise sap 15 SP4
2.0.0-150200.6.12.1
fixed
suse enterprise sap 15 SP5
2.0.0-150200.6.12.1
fixed
suse enterprise server 15 SP4
2.0.0-150200.6.12.1
fixed
suse enterprise server 15 SP5
2.0.0-150200.6.12.1
fixed
terraform-provider-google
suse enterprise sap 15 SP4
3.43.0-150200.6.12.1
fixed
suse enterprise sap 15 SP5
3.43.0-150200.6.12.1
fixed
suse enterprise server 15 SP4
3.43.0-150200.6.12.1
fixed
suse enterprise server 15 SP5
3.43.0-150200.6.12.1
fixed
terraform-provider-helm
suse enterprise sap 15 SP4
2.9.0-150200.6.23.1
fixed
suse enterprise sap 15 SP5
2.9.0-150200.6.23.1
fixed
suse enterprise server 15 SP4
2.9.0-150200.6.23.1
fixed
suse enterprise server 15 SP5
2.9.0-150200.6.23.1
fixed
terraform-provider-kubernetes
suse enterprise sap 15 SP4
1.13.2-150200.6.12.1
fixed
suse enterprise sap 15 SP5
1.13.2-150200.6.12.1
fixed
suse enterprise server 15 SP4
1.13.2-150200.6.12.1
fixed
suse enterprise server 15 SP5
1.13.2-150200.6.12.1
fixed
terraform-provider-local
suse enterprise sap 15 SP4
2.0.0-150200.6.17.1
fixed
suse enterprise sap 15 SP5
2.0.0-150200.6.17.1
fixed
suse enterprise server 15 SP4
2.0.0-150200.6.17.1
fixed
suse enterprise server 15 SP5
2.0.0-150200.6.17.1
fixed
terraform-provider-null
suse enterprise sap 15 SP4
3.0.0-150200.6.18.1
fixed
suse enterprise sap 15 SP5
3.0.0-150200.6.18.1
fixed
suse enterprise server 15 SP4
3.0.0-150200.6.18.1
fixed
suse enterprise server 15 SP5
3.0.0-150200.6.18.1
fixed
terraform-provider-random
suse enterprise sap 15 SP4
3.0.0-150200.6.15.1
fixed
suse enterprise sap 15 SP5
3.0.0-150200.6.15.1
fixed
suse enterprise server 15 SP4
3.0.0-150200.6.15.1
fixed
suse enterprise server 15 SP5
3.0.0-150200.6.15.1
fixed
terraform-provider-tls
suse enterprise sap 15 SP4
3.0.0-150200.5.15.1
fixed
suse enterprise sap 15 SP5
3.0.0-150200.5.15.1
fixed
suse enterprise server 15 SP4
3.0.0-150200.5.15.1
fixed
suse enterprise server 15 SP5
3.0.0-150200.5.15.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
podman
RHEL 9
6:5.8.2-4.el9_8
fixed
podman-docker
RHEL 9
6:5.8.2-4.el9_8
fixed
podman-plugins
RHEL 9
6:5.8.2-4.el9_8
fixed
podman-remote
RHEL 9
6:5.8.2-4.el9_8
fixed
podman-tests
RHEL 9
6:5.8.2-4.el9_8
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
amazon-cloudwatch-agent
Amazon Linux 2
0:1.300067.1-1.amzn2
fixed
Amazon Linux 2023
0:1.300067.1-1.amzn2023
fixed
amazon-ssm-agent
Amazon Linux 2
0:3.3.4624.0-1.amzn2
fixed
Amazon Linux 2023
0:3.3.4624.0-1.amzn2023
fixed
containerd
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-debuginfo
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-debugsource
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-stress
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
containerd-stress-debuginfo
Amazon Linux 2023
0:2.2.4-1.amzn2023.0.1
fixed
docker
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.1
fixed
docker-debuginfo
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.1
fixed
docker-debugsource
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.1
fixed
nerdctl
Amazon Linux 2
0:2.2.2-1.amzn2.0.3
fixed
Amazon Linux 2023
0:2.2.2-1.amzn2023.0.3
fixed
nerdctl-debuginfo
Amazon Linux 2
0:2.2.2-1.amzn2.0.3
fixed
rclone
Amazon Linux 2
0:1.55.1-1.amzn2.0.7
fixed
Amazon Linux 2023
0:1.74.2-80.amzn2023
fixed
rclone-debuginfo
Amazon Linux 2
0:1.55.1-1.amzn2.0.7
fixed
Amazon Linux 2023
0:1.74.2-80.amzn2023
fixed
rclone-debugsource
Amazon Linux 2023
0:1.74.2-80.amzn2023
fixed
runfinch-finch
Amazon Linux 2023
0:1.17.1-1.amzn2023.0.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
packer
Azure Linux 3.0
0:1.9.5-14.azl3
fixed
telegraf
Azure Linux 3.0
0:1.31.0-21.azl3
fixed
Common Weakness Enumeration
References
https://go.dev/cl/781220
https://go.dev/issue/79568
https://groups.google.com/g/golang-announce/c/a082jnz-LvI
https://pkg.go.dev/vuln/GO-2026-5021
https://access.redhat.com/errata/RHSA-2026:23262
https://access.redhat.com/errata/RHSA-2026:23264
https://access.redhat.com/errata/RHSA-2026:26546
https://access.redhat.com/errata/RHSA-2026:26547
https://access.redhat.com/errata/RHSA-2026:35833
https://access.redhat.com/errata/RHSA-2026:36648
https://access.redhat.com/errata/RHSA-2026:36651
https://access.redhat.com/errata/RHSA-2026:36796
https://access.redhat.com/errata/RHSA-2026:36797
https://access.redhat.com/errata/RHSA-2026:36808
https://access.redhat.com/errata/RHSA-2026:37072
https://access.redhat.com/errata/RHSA-2026:37123
https://access.redhat.com/errata/RHSA-2026:37387
https://access.redhat.com/errata/RHSA-2026:40118
https://access.redhat.com/errata/RHSA-2026:40262
https://access.redhat.com/errata/RHSA-2026:40945
https://access.redhat.com/errata/RHSA-2026:41019
https://access.redhat.com/errata/RHSA-2026:41031
https://access.redhat.com/errata/RHSA-2026:41036
https://access.redhat.com/errata/RHSA-2026:41064
https://access.redhat.com/errata/RHSA-2026:41066
https://access.redhat.com/errata/RHSA-2026:42146
https://access.redhat.com/errata/RHSA-2026:42796
https://access.redhat.com/errata/RHSA-2026:43052
https://access.redhat.com/errata/RHSA-2026:43692
https://access.redhat.com/errata/RHSA-2026:46885
https://access.redhat.com/errata/RHSA-2026:47735
https://access.redhat.com/errata/RHSA-2026:47737
https://access.redhat.com/errata/RHSA-2026:49944
https://access.redhat.com/errata/RHSA-2026:51033
https://access.redhat.com/errata/RHSA-2026:51288
https://access.redhat.com/errata/RHSA-2026:52857
https://access.redhat.com/errata/RHSA-2026:52910
https://access.redhat.com/errata/RHSA-2026:54400
https://access.redhat.com/errata/RHSA-2026:57194
https://access.redhat.com/security/cve/CVE-2026-42508
https://bugzilla.redhat.com/show_bug.cgi?id=2480688
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json