The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade toolboxUpgrade containers-commonUpgrade podman-pluginsUpgrade skopeoUpgrade libslirp-develUpgrade python3-podmanUpgrade aardvark-dnsUpgrade criu-develUpgrade criu-libsUpgrade skopeo-testsUpgrade toolbox-testsUpgrade critUpgrade podmanUpgrade fuse-overlayfsUpgrade podman-testsUpgrade conmonUpgrade libslirpUpgrade runcUpgrade buildahUpgrade podman-catatonitUpgrade udicaUpgrade podman-gvproxyUpgrade python3-criuUpgrade cockpit-podmanUpgrade crunUpgrade criuUpgrade podman-dockerUpgrade buildah-testsUpgrade slirp4netnsUpgrade netavark | Jun 25, 2026 | Jun 24, 2026 |
| Amazon Linux Ami 2 | — | Upgrade runfinch-finchUpgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade nerdctlUpgrade containerd-stressUpgrade dockerUpgrade nerdctl-debuginfoUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade rclone-debuginfoUpgrade rcloneUpgrade containerd | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-stressUpgrade rclone-debuginfoUpgrade rclone-debugsourceUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade runfinch-finchUpgrade amazon-ssm-agentUpgrade containerdUpgrade rcloneUpgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade dockerUpgrade nerdctlUpgrade docker-debugsourceUpgrade docker-debuginfo | Jun 9, 2026 | May 22, 2026 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade buildahUpgrade podmanUpgrade podman-remoteUpgrade buildah-testsUpgrade podman-pluginsUpgrade podman-tests | Oct 22, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade podman-gvproxyUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade podman-testsUpgrade skopeoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade libslirpUpgrade conmon-debuginfoUpgrade podman-tests-debuginfoUpgrade runc-debugsourceNo solution existsUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade python3-podmanUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade netavarkUpgrade fuse-overlayfsUpgrade podmanUpgrade podman-dockerUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade buildahUpgrade criu-libs-debuginfoUpgrade criuUpgrade buildah-testsUpgrade buildah-debugsourceUpgrade flightctl-agentUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade toolbox-debuginfoUpgrade containernetworking-pluginsUpgrade runcUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade flightctl-observabilityUpgrade criu-develUpgrade container-selinuxUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade flightctl-cliUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade flightctl-selinuxUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade toolboxUpgrade flightctl-servicesUpgrade crun-debugsourceUpgrade udica | Jun 26, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade buildah-debugsourceUpgrade conmonUpgrade criu-develUpgrade toolboxUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade toolbox-debugsourceUpgrade runcUpgrade crun-debugsourceUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade toolbox-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-testsUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade libslirpUpgrade skopeoUpgrade skopeo-testsUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade buildah-testsUpgrade netavarkUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-tests-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade criuUpgrade slirp4netns-debugsourceUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsource | Jun 29, 2026 | Jun 26, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub