RHSA-2026:99613: Important: host-metering security update
Host metering serviceSecurity Fix(es): crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: host-metering security update
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/host-meteringto a version that resolves this vulnerability.Fixed in 1.4.0-10.el7_9 - Upgrade
Upgrade
redhat/host-metering-debuginfoto a version that resolves this vulnerability.Fixed in 1.4.0-10.el7_9 - Upgrade
Upgrade
redhat/host-metering-debugsourceto a version that resolves this vulnerability.Fixed in 1.4.0-10.el7_9 - Upgrade
Upgrade
redhat/host-metering-selinuxto a version that resolves this vulnerability.Fixed in 1.4.0-10.el7_9
Event History
Frequently Asked Questions
Which packages and platforms are covered by this advisory?
The advisory covers Red Hat host-metering, host-metering-selinux, host-metering-debuginfo, and host-metering-debugsource packages. It also lists Red Hat Enterprise Linux Server Extended Life Cycle Support, including the IBM Power little-endian variant.