Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc (crlsa-2025_3210)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20253210 advisory. golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-22869 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: gvisor-tap-vsock / gvisor-tap-vsock-debuginfo / etc (crlsa-2025_7416)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257416 advisory. golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-22869 Tenable has extracted the preceding description block...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issue: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

SUSE-SU-2026:4372-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issue: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 - CVE-2026-78662:...

golang.org/x/crypto/ssh Vulnerability

The vulnerability of the golang.org/x/crypto/ssh library for the Go programming language is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to influence the accessibility of protected information...

golang.org/x/crypto/ssh Privilege Escalation

The vulnerability of the golang.org/x/crypto/ssh library for the Go programming language is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Exploit for Incorrect Implementation of Authentication Algorithm in Golang Crypto

CVE-2026-46595 proof https://vulners.com/cve/CVE-2026-46595 i...

SUSE SLES12 Security Update : docker-stable (SUSE-SU-2026:1118-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1118-1 advisory. - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption bsc1253904. Tenable has...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

A flaw was found in golang.org/x/crypto/ssh. After a channel has been established, a remote malicious peer could send specially crafted messages. This could lead to a deadlock of the entire connection, resulting in a Denial of Service DoS for the affected system...

Security update for apptainer (critical)

openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21927-1 Rating: critical References: bsc1278666 bsc1279033 bsc1279236 bsc1279333 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-78662...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21884-1 Rating: important References: bsc1276981 bsc1276994 bsc1278681 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-71556...

SUSE SLES15 Security Update : apptainer (SUSE-SU-2026:4308-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4308-1 advisory. - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. - CVE-2026-56855:...

Security update for apptainer

This update for apptainer fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278666. CVE-2026-78662:...

SUSE-SU-2026:4308-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278666. - CVE-2026-78662:...

SUSE-SU-2026:4293-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak p...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

Security Bulletin: Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent

Summary Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent, IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-47913 DESCRIPTION: SSH clients receiving...

SUSE-SU-2026:4272-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118....

Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118...