Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88359.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-88359
Upstream
Published
2026-05-22T04:16:25Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-42508 affecting package telegraf for versions less than 1.31.0-22
Details

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

References

Affected packages

Azure Linux:3 / telegraf

Package

Name
telegraf
Purl
pkg:rpm/azure-linux/telegraf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.31.0-22

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88359.json"