The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade runfinch-finchUpgrade rcloneUpgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade nerdctl-debuginfoUpgrade nerdctlUpgrade containerd-stressUpgrade docker | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade runfinch-finchUpgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade rclone-debugsourceUpgrade docker-debugsourceUpgrade dockerUpgrade containerd-debugsourceUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade rcloneUpgrade containerd-stress-debuginfoUpgrade rclone-debuginfoUpgrade containerd | Jun 9, 2026 | May 22, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 22, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.11Upgrade Splunk Enterprise to version 9.4.16Upgrade Splunk Enterprise to version 10.0.10Upgrade Splunk Enterprise to version 10.4.3Upgrade Splunk Enterprise to version 10.2.8Upgrade Splunk Enterprise to version 9.4.15Upgrade Splunk Enterprise to version 10.2.7Upgrade Splunk Enterprise to version 10.4.4 | Oct 20, 2026 | May 22, 2026 |
| Ubuntu | — | Upgrade lxd (Ubuntu Pro)Upgrade golang-go.crypto-dev (Ubuntu Pro)Upgrade golang-golang-x-crypto-dev (Ubuntu Pro) | Jun 18, 2026 | Jun 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub