SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade containernetworking-pluginsUpgrade podmanUpgrade podman-pluginsUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade critUpgrade udicaUpgrade podman-remoteUpgrade buildahUpgrade criuUpgrade runcUpgrade skopeoUpgrade containers-commonUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade python3-criuUpgrade podman-testsUpgrade podman-dockerUpgrade conmonUpgrade libslirp-develUpgrade buildah-testsUpgrade python3-podmanUpgrade container-selinuxUpgrade criu-libsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade netavarkUpgrade crunUpgrade podman-gvproxyUpgrade criu-develUpgrade cockpit-podman | Jul 13, 2026 | Jul 9, 2026 |
| Amazon Linux Ami 2 | — | Upgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade containerdUpgrade runfinch-finchUpgrade nerdctl-debuginfo | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade containerdUpgrade containerd-stressUpgrade runfinch-finchUpgrade rclone-debugsourceUpgrade nerdctlUpgrade containerd-debugsourceUpgrade rcloneUpgrade containerd-stress-debuginfo | Jun 9, 2026 | May 22, 2026 |
| Redhat Openshift | — | Upgrade openshift | Aug 17, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade flightctl-servicesUpgrade runcUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade critUpgrade podman-debuginfoUpgrade crunUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade flightctl-observabilityUpgrade criu-libs-debuginfoUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade criu-develUpgrade flightctl-agentUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade container-selinuxUpgrade podman-pluginsUpgrade python3-criuUpgrade cockpit-podmanUpgrade buildah-debugsourceUpgrade podmanUpgrade buildah-testsUpgrade podman-tests-debuginfoUpgrade podman-testsUpgrade podman-dockerUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade criuUpgrade fuse-overlayfsUpgrade conmonUpgrade python3-podmanUpgrade criu-debuginfoUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade buildahUpgrade libslirpUpgrade criu-libsUpgrade slirp4netnsNo solution existsUpgrade crun-debugsourceUpgrade flightctl-cliUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeoUpgrade netavarkUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade flightctl-selinuxUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dns | Jul 9, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade netavarkUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade conmonUpgrade podman-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade podman-testsUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-develUpgrade toolbox-testsUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade libslirpUpgrade crunUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade criu-debuginfoUpgrade buildahUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade podman-pluginsUpgrade runcUpgrade libslirp-debugsourceUpgrade critUpgrade podmanUpgrade criu-debugsourceUpgrade criuUpgrade criu-develUpgrade toolboxUpgrade conmon-debugsourceUpgrade skopeoUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade criu-libs-debuginfo | Jul 10, 2026 | Jul 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub