During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Jan 29, 2026 | Jan 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade cri-toolsUpgrade docker-debuginfoUpgrade golang-miscUpgrade golistUpgrade amazon-cloudwatch-agentUpgrade cni-plugins-debuginfoUpgrade amazon-ecr-credential-helperUpgrade soci-snapshotterUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooksUpgrade golang-sharedUpgrade golangUpgrade golist-debuginfoUpgrade cni-pluginsUpgrade cri-tools-debuginfoUpgrade golang-testsUpgrade containerd-stressUpgrade runcUpgrade golang-binUpgrade containerd-debuginfoUpgrade nerdctlUpgrade golang-docsUpgrade ecs-initUpgrade dockerUpgrade golang-github-cpuguy83-go-md2manUpgrade nerdctl-debuginfoUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade containerd | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade credentials-fetcher | May 28, 2026 | Jan 28, 2026 |
| Dell Idrac | — | Upgrade Dell iDRAC to the latest version | Jun 26, 2026 | Jun 25, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub