The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rcloneUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade dockerUpgrade containerdUpgrade containerd-stressUpgrade nerdctl-debuginfoUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade rclone-debuginfoUpgrade containerd-debuginfoUpgrade amazon-ssm-agent | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-debugsourceUpgrade containerd-stressUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade rclone-debugsourceUpgrade docker-debugsourceUpgrade containerdUpgrade rclone-debuginfoUpgrade rcloneUpgrade dockerUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade containerd-stress-debuginfo | Jun 9, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade flightctl-observabilityUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-tests-debuginfoUpgrade flightctl-agentUpgrade podman-dockerUpgrade flightctl-selinuxUpgrade podman-pluginsUpgrade flightctl-servicesUpgrade podman-debugsourceUpgrade podman-remote-debuginfoNo solution existsUpgrade podman-debuginfoUpgrade flightctl-cliUpgrade podmanUpgrade podman-tests | Aug 4, 2026 | May 22, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.15Upgrade Splunk Enterprise to version 10.2.7Upgrade Splunk Enterprise to version 10.0.10Upgrade Splunk Enterprise to version 10.4.3 | Oct 20, 2026 | May 22, 2026 |
| Ubuntu | — | Upgrade google-guest-agent (Ubuntu Pro)Upgrade google-guest-agentUpgrade golang-golang-x-crypto-dev (Ubuntu Pro)Upgrade golang-go.crypto-dev (Ubuntu Pro) | Jun 18, 2026 | Jun 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub