SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade podman-dockerUpgrade python3-podmanUpgrade skopeo-testsUpgrade criu-develUpgrade libslirpUpgrade cockpit-podmanUpgrade criu-libsUpgrade container-selinuxUpgrade slirp4netnsUpgrade conmonUpgrade podman-testsUpgrade podman-gvproxyUpgrade netavarkUpgrade podmanUpgrade skopeoUpgrade podman-catatonitUpgrade buildahUpgrade podman-remoteUpgrade podman-pluginsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade toolboxUpgrade toolbox-testsUpgrade containers-commonUpgrade criuUpgrade runcUpgrade critUpgrade fuse-overlayfsUpgrade udicaUpgrade aardvark-dns | Jul 13, 2026 | Jul 9, 2026 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade containerd-stressUpgrade amazon-ssm-agentUpgrade nerdctlUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade nerdctl-debuginfoUpgrade runfinch-finch | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade rcloneUpgrade nerdctlUpgrade containerd-debugsourceUpgrade containerd-stress-debuginfoUpgrade rclone-debuginfoUpgrade amazon-cloudwatch-agentUpgrade rclone-debugsourceUpgrade containerd-stressUpgrade containerdUpgrade runfinch-finchUpgrade containerd-debuginfoUpgrade amazon-ssm-agent | Jun 9, 2026 | May 22, 2026 |
| Redhat Openshift | — | Upgrade openshift | Aug 17, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade buildahNo solution existsUpgrade python3-podmanUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade podman-dockerUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade toolbox-testsUpgrade criu-libsUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade podman-tests-debuginfoUpgrade conmonUpgrade flightctl-selinuxUpgrade podman-catatonitUpgrade podman-testsUpgrade toolboxUpgrade netavarkUpgrade buildah-testsUpgrade skopeoUpgrade flightctl-cliUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade flightctl-agentUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade udicaUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-gvproxyUpgrade flightctl-servicesUpgrade criu-libs-debuginfoUpgrade libslirp-develUpgrade crunUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade flightctl-observabilityUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade podman-remoteUpgrade skopeo-testsUpgrade runc-debuginfo | Jul 9, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade crunUpgrade libslirp-develUpgrade podman-tests-debuginfoUpgrade conmonUpgrade criu-libsUpgrade podman-gvproxyUpgrade buildahUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade libslirpUpgrade toolbox-testsUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade netavarkUpgrade podman-debugsourceUpgrade conmon-debuginfoUpgrade podman-testsUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade criuUpgrade criu-debugsourceUpgrade skopeoUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade toolbox-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolboxUpgrade criu-develUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade critUpgrade python3-criuUpgrade podman-pluginsUpgrade podmanUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade runcUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade podman-remote-debuginfo | Jul 10, 2026 | Jul 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub