18717 matches found
AZL-87218 CVE-2026-46598 affecting package cri-o 1.30.1-1
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-88083 CVE-2026-46597 affecting package moby-engine for versions less than 25.0.3-18
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-88347 CVE-2026-46598 affecting package telegraf for versions less than 1.31.0-23
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-87185 CVE-2026-46598 affecting package buildah 1.43.1-3
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-87630 CVE-2026-46597 affecting package docker-buildx for versions less than 0.14.0-13
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87329 CVE-2026-46598 affecting package podman 5.6.1-10
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-87696 CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87741 CVE-2026-46597 affecting package gh for versions less than 2.62.0-16
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-88203 CVE-2026-46598 affecting package packer for versions less than 1.9.5-15
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-87642 CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...
AZL-87194 CVE-2026-46597 affecting package buildah 1.43.1-3
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-88311 CVE-2026-46597 affecting package telegraf for versions less than 1.31.0-22
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
AZL-87227 CVE-2026-46595 affecting package cri-o 1.30.1-1
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...
AZL-87326 CVE-2026-46595 affecting package podman 5.6.1-10
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...
AZL-87179 CVE-2026-46595 affecting package buildah 1.43.1-3
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...
AZL-87224 CVE-2026-42508 affecting package cri-o 1.30.1-1
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked...
AZL-87284 CVE-2026-42508 affecting package podman 5.6.1-10
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked...
AZL-88188 CVE-2026-42508 affecting package packer for versions less than 1.9.5-15
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked...
AZL-88359 CVE-2026-42508 affecting package telegraf for versions less than 1.31.0-22
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked...
AZL-87233 CVE-2026-39834 affecting package cri-o 1.30.1-1
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87465 CVE-2026-39835 affecting package cf-cli for versions less than 8.7.11-7
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-88350 CVE-2026-39834 affecting package telegraf for versions less than 1.31.0-22
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87648 CVE-2026-39834 affecting package docker-buildx for versions less than 0.14.0-13
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87762 CVE-2026-39834 affecting package gh for versions less than 2.62.0-16
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87308 CVE-2026-39835 affecting package podman 5.6.1-10
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-88152 CVE-2026-39834 affecting package nvidia-container-toolkit for versions less than 1.17.8-3
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87975 CVE-2026-39835 affecting package kubevirt for versions less than 1.7.1-7
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87248 CVE-2026-39835 affecting package cri-o 1.30.1-1
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-88071 CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-88065 CVE-2026-39834 affecting package moby-engine for versions less than 25.0.3-18
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87441 CVE-2026-39834 affecting package cf-cli for versions less than 8.7.11-6
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87933 CVE-2026-39834 affecting package kubernetes for versions less than 1.30.10-25
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-88167 CVE-2026-39835 affecting package packer for versions less than 1.9.5-15
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87302 CVE-2026-39834 affecting package podman 5.6.1-10
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87423 CVE-2026-39834 affecting package cert-manager for versions less than 1.12.15-9
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-88332 CVE-2026-39835 affecting package telegraf for versions less than 1.31.0-23
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87627 CVE-2026-39835 affecting package docker-buildx for versions less than 0.14.0-15
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87191 CVE-2026-39835 affecting package buildah 1.43.1-3
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-88212 CVE-2026-39834 affecting package packer for versions less than 1.9.5-15
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87687 CVE-2026-39834 affecting package docker-compose for versions less than 2.27.0-11
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87912 CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87203 CVE-2026-39834 affecting package buildah 1.43.1-3
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87768 CVE-2026-39835 affecting package gh for versions less than 2.62.0-17
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87702 CVE-2026-39835 affecting package docker-compose for versions less than 2.27.0-12
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-87972 CVE-2026-39834 affecting package kubevirt for versions less than 1.7.1-7
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation...
AZL-87417 CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-9
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...
AZL-88179 CVE-2026-39828 affecting package packer for versions less than 1.9.5-15
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError...
AZL-87296 CVE-2026-39828 affecting package podman 5.6.1-10
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError...
AZL-87771 CVE-2026-39830 affecting package gh for versions less than 2.62.0-16
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close, resulting in a resource leak per connection. Unsolicited global responses are now discarded...
AZL-87450 CVE-2026-39828 affecting package cf-cli for versions less than 8.7.11-7
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError...