Affected: golang.org/x/crypto/ssh, Red Hat Cryostat 4 on RHEL 9, Red Hat RHEM 1.0 for RHEL 9, Red Hat RHEM 1.1 for RHEL 10, Red Hat RHEM 1.1 for RHEL 9, Red Hat Cert Manager support for Red Hat OpenShift release 1.19, Red Hat Cluster Observability Operator 1.5.0, Red Hat DevWorkspace Operator 0.42, Red Hat Logging Subsystem for Red Hat OpenShift 6.6, Red Hat multicluster engine for Kubernetes 2.8 and 46 more

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.