RHSA-2026:99613HighCVSS 6.8

Red Hat Security Advisory: host-metering security update

Published
November 12, 2026
Last Modified
November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-111943 →

📋 Description

CVE-2026-111943 — crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates

🎯 Affected products9

  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-0:1.4.0-10.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-0:1.4.0-10.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-0:1.4.0-10.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-debuginfo-0:1.4.0-10.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-debuginfo-0:1.4.0-10.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-debugsource-0:1.4.0-10.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-debugsource-0:1.4.0-10.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)
  • host-metering-selinux-0:1.4.0-10.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7 ELS)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: See the security bulletin for a detailed mitigation procedure.

🔗 References (4)