The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade podman-pluginsUpgrade criu-develUpgrade container-selinuxUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade toolboxUpgrade python3-podmanUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade aardvark-dnsUpgrade libslirp-develUpgrade podman-catatonitUpgrade buildahUpgrade buildah-testsUpgrade podman-testsUpgrade criuUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade udicaUpgrade toolbox-testsUpgrade critUpgrade python3-criuUpgrade runcUpgrade fuse-overlayfsUpgrade netavarkUpgrade podman-dockerUpgrade libslirpUpgrade podmanUpgrade cockpit-podmanUpgrade crunUpgrade conmon | Jun 25, 2026 | Jun 24, 2026 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade containerdUpgrade rcloneUpgrade nerdctl-debuginfoUpgrade dockerUpgrade rclone-debuginfoUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade amazon-ssm-agentUpgrade nerdctlUpgrade containerd-stressUpgrade amazon-cloudwatch-agent | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade runfinch-finchUpgrade amazon-cloudwatch-agentUpgrade containerdUpgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade amazon-ssm-agentUpgrade rclone-debugsourceUpgrade containerd-stressUpgrade rcloneUpgrade docker-debugsourceUpgrade containerd-debugsourceUpgrade dockerUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade docker-debuginfo | Jun 9, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade python3-podmanUpgrade conmon-debugsourceUpgrade podman-testsUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade podman-tests-debuginfoUpgrade buildahUpgrade criuUpgrade netavarkUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade skopeoUpgrade aardvark-dnsNo solution existsUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade podman-dockerUpgrade toolbox-debugsourceUpgrade slirp4netnsUpgrade buildah-testsUpgrade toolbox-testsUpgrade libslirpUpgrade buildah-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade flightctl-cliUpgrade criu-develUpgrade flightctl-observabilityUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade flightctl-agentUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade conmonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade flightctl-selinuxUpgrade criu-libsUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade runcUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade flightctl-servicesUpgrade crun-debugsourceUpgrade udicaUpgrade libslirp-debugsourceUpgrade podman-plugins | Jun 26, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade crunUpgrade skopeoUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade runcUpgrade toolbox-debugsourceUpgrade crun-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade criu-debuginfoUpgrade critUpgrade criuUpgrade aardvark-dnsUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade podmanUpgrade containernetworking-pluginsUpgrade conmonUpgrade buildahUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade toolbox-testsUpgrade netavarkUpgrade podman-tests-debuginfoUpgrade fuse-overlayfsUpgrade criu-develUpgrade libslirp-debuginfoUpgrade criu-libsUpgrade python3-criuUpgrade containernetworking-plugins-debuginfo | Jun 29, 2026 | Jun 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub