Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade dockerUpgrade amazon-cloudwatch-agentUpgrade nerdctl-debuginfoUpgrade containerdUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade runfinch-finchUpgrade nerdctl | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade rclone-debuginfoUpgrade runfinch-finchUpgrade containerd-stressUpgrade docker-debugsourceUpgrade rclone-debugsourceUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade containerd-debuginfoUpgrade containerd-debugsourceUpgrade docker-debuginfoUpgrade containerdUpgrade dockerUpgrade rclone | Jun 9, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade flightctl-cliUpgrade flightctl-agentUpgrade flightctl-observabilityNo solution existsUpgrade flightctl-servicesUpgrade flightctl-selinux | Jul 17, 2026 | May 22, 2026 |
| Ubuntu | — | Upgrade google-guest-agentUpgrade golang-golang-x-crypto-dev (Ubuntu Pro) | Jun 18, 2026 | Jun 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub