Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade go-toolsetUpgrade criuUpgrade libslirpUpgrade grafanaUpgrade osbuild-composer-workerUpgrade critUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade buildahUpgrade udicaUpgrade buildah-testsUpgrade cockpit-podmanUpgrade opentelemetry-collectorUpgrade podman-testsUpgrade crunUpgrade git-lfsUpgrade conmonUpgrade podman-gvproxyUpgrade golang-raceUpgrade podman-dockerUpgrade podman-catatonitUpgrade golang-docsUpgrade osbuild-composer-coreUpgrade golang-srcUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade golangUpgrade criu-libsUpgrade container-selinuxUpgrade toolboxUpgrade aardvark-dnsUpgrade grafana-selinuxUpgrade podman-remoteUpgrade delveUpgrade golang-binUpgrade runcUpgrade osbuild-composerUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade netavarkUpgrade skopeo-testsUpgrade python3-criuUpgrade containers-commonUpgrade golang-miscUpgrade criu-develUpgrade grafana-pcpUpgrade podmanUpgrade skopeoUpgrade podman-plugins | Oct 11, 2026 | Aug 26, 2026 |
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-srcUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-tests | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade ose-crio-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade openshift-kuryrUpgrade ose-aws-ecr-image-credential-providerUpgrade openshift-clientsUpgrade cri-oUpgrade cri-toolsUpgrade microshiftUpgrade openshiftUpgrade ose-azure-acr-image-credential-provider | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade delve-debuginfoUpgrade osbuild-composer-coreUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade grafana-pcpUpgrade conmon-debugsourceUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade golangUpgrade go-fdo-clientUpgrade containers-commonUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade go-fdo-client-debugsourceUpgrade criu-debugsourceUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade image-builder-debugsourceUpgrade image-builder-debuginfoUpgrade golang-raceUpgrade podman-catatonitUpgrade git-lfs-debugsourceUpgrade grafana-selinuxUpgrade grafana-pcp-debuginfoUpgrade delve-debugsourceUpgrade crun-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade skopeo-debugsourceUpgrade grafana-debuginfoUpgrade buildah-debugsourceUpgrade skopeoUpgrade netavarkUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade criuUpgrade osbuild-composer-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-gvproxyUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade go-fdo-server-debuginfoUpgrade go-fdo-client-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade go-toolsetUpgrade osbuild-composer-workerUpgrade grafana-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade crunUpgrade critUpgrade runc-debuginfoUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade grafana-pcp-debugsourceUpgrade criu-develUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade ipp-usb-debuginfoUpgrade image-builderUpgrade slirp4netns-debuginfoUpgrade go-fdo-serverUpgrade osbuild-composer-worker-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade go-fdo-server-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade podman-tests-debuginfoUpgrade opentelemetry-collectorUpgrade podman-pluginsUpgrade ipp-usbUpgrade python3-criuUpgrade skopeo-testsUpgrade osbuild-composer-debugsourceUpgrade delveUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade git-lfsUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade osbuild-composer | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub