The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade skopeoUpgrade aardvark-dnsUpgrade libslirp-develUpgrade podman-pluginsUpgrade python3-podmanUpgrade toolboxUpgrade container-selinuxUpgrade criu-develUpgrade buildah-testsUpgrade critUpgrade runcUpgrade podman-testsUpgrade fuse-overlayfsUpgrade podmanUpgrade buildahUpgrade slirp4netnsUpgrade podman-dockerUpgrade udicaUpgrade netavarkUpgrade toolbox-testsUpgrade criuUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade libslirpUpgrade conmonUpgrade python3-criuUpgrade crun | Jun 25, 2026 | Jun 24, 2026 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade rcloneUpgrade rclone-debuginfoUpgrade dockerUpgrade containerdUpgrade nerdctl-debuginfoUpgrade amazon-cloudwatch-agentUpgrade runfinch-finchUpgrade amazon-ssm-agentUpgrade containerd-stressUpgrade nerdctl | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade rcloneUpgrade containerd-debugsourceUpgrade docker-debugsourceUpgrade dockerUpgrade containerd-stress-debuginfoUpgrade docker-debuginfoUpgrade nerdctlUpgrade rclone-debuginfoUpgrade runfinch-finchUpgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade containerd-stressUpgrade rclone-debugsourceUpgrade containerdUpgrade containerd-debuginfo | Jun 9, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade skopeoUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade criu-debuginfoUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade criuUpgrade podman-gvproxyUpgrade aardvark-dnsNo solution existsUpgrade criu-debugsourceUpgrade podman-tests-debuginfoUpgrade podman-catatonitUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade flightctl-agentUpgrade runcUpgrade crun-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade libslirp-develUpgrade conmonUpgrade flightctl-cliUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade flightctl-selinuxUpgrade crun-debuginfoUpgrade container-selinuxUpgrade flightctl-observabilityUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade python3-criuUpgrade criu-develUpgrade critUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade flightctl-servicesUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade toolboxUpgrade containers-common | Jun 26, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade podman-tests-debuginfoUpgrade podman-remoteUpgrade criuUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade netavarkUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade buildahUpgrade podmanUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade containers-commonUpgrade runcUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade critUpgrade python3-criuUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade conmonUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade skopeoUpgrade podman-debugsourceUpgrade crunUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsource | Jun 29, 2026 | Jun 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub