SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade toolbox-testsUpgrade python3-criuUpgrade podman-catatonitUpgrade podmanUpgrade podman-remoteUpgrade podman-pluginsUpgrade criuUpgrade critUpgrade skopeoUpgrade toolboxUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade buildahUpgrade udicaUpgrade runcUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade cockpit-podmanUpgrade libslirpUpgrade container-selinuxUpgrade netavarkUpgrade criu-develUpgrade skopeo-testsUpgrade libslirp-develUpgrade podman-testsUpgrade slirp4netnsUpgrade buildah-testsUpgrade python3-podmanUpgrade conmonUpgrade criu-libsUpgrade podman-dockerUpgrade podman-gvproxy | Jul 13, 2026 | Jul 9, 2026 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade nerdctlUpgrade containerdUpgrade amazon-cloudwatch-agentUpgrade containerd-stressUpgrade runfinch-finchUpgrade nerdctl-debuginfo | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-debugsourceUpgrade rcloneUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade amazon-cloudwatch-agentUpgrade rclone-debugsourceUpgrade containerdUpgrade rclone-debuginfoUpgrade runfinch-finchUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade containerd-stress | Jun 9, 2026 | May 22, 2026 |
| Redhat Openshift | — | Upgrade openshift | Aug 17, 2026 | May 22, 2026 |
| Redhat_linux | — | Upgrade flightctl-cliUpgrade netavarkUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade buildahUpgrade python3-podmanUpgrade flightctl-selinuxUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade podmanUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade crun-debugsourceUpgrade podman-tests-debuginfoUpgrade slirp4netnsUpgrade podman-dockerNo solution existsUpgrade criuUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade podman-testsUpgrade criu-libsUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade conmonUpgrade podman-remoteUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade runc-debuginfoUpgrade udicaUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade flightctl-servicesUpgrade crunUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade critUpgrade criu-libs-debuginfoUpgrade cockpit-podmanUpgrade python3-criuUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade flightctl-observabilityUpgrade slirp4netns-debugsourceUpgrade flightctl-agentUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade toolbox-debugsource | Jul 9, 2026 | May 22, 2026 |
| Rocky_linux | — | Upgrade podman-tests-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade podman-debugsourceUpgrade libslirpUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade buildahUpgrade criu-libsUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade netavarkUpgrade podman-gvproxyUpgrade slirp4netns-debugsourceUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade crunUpgrade conmonUpgrade runc-debuginfoUpgrade toolbox-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade criuUpgrade criu-develUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade toolbox-debuginfoUpgrade toolboxUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade runcUpgrade python3-criuUpgrade podman-pluginsUpgrade podmanUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade podman-gvproxy-debuginfo | Jul 10, 2026 | Jul 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub