Vulnerability · Published May 22, 2026 · Assigned by Go
CVE-2026-39829Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
High 7.5
In plain English
A high-severity security flaw in golang.org/x/crypto/ssh from golang.org/x/crypto. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 59.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:10 | buildah | 2:1.43.1-3.el10_2 | ALSA-2026:36199 |
| AlmaLinux:8 | buildah | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | buildah | 2:1.43.1-2.el9_8 | ALSA-2026:29455 |
| AlmaLinux:10 | buildah-tests | 2:1.43.1-3.el10_2 | ALSA-2026:36199 |
| AlmaLinux:8 | buildah-tests | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | buildah-tests | 2:1.43.1-2.el9_8 | ALSA-2026:29455 |
| AlmaLinux:8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-3.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | podman | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-catatonit | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-docker | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-docker | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-gvproxy | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-plugins | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-plugins | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-remote | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-remote | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-tests | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-tests | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo-tests | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| Debian:12 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-39829 |
| Debian:13 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-39829 |
| Debian:14 | golang-go.crypto | 1:0.52.0-1 | DEBIAN-CVE-2026-39829 |
| Go | golang.org/x/crypto | 0.52.0 | GHSA-w879-237q-wc7r |
| Go | golang.org/x/crypto | 0.52.0 | GO-2026-5018 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:10 | buildah | 2:1.43.1-3.el10_2 | RLSA-2026:36199 |
| Rocky Linux:9 | buildah | 2:1.43.1-2.el9_8 | RLSA-2026:29455 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-3.module+el8.10.0+40223+e940a224 | RLSA-2026:35833 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:10 | podman | 7:5.8.2-4.el10_2 | RLSA-2026:37072 |
| Rocky Linux:9 | podman | 6:5.8.2-4.el9_8 | RLSA-2026:37123 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| golang.org/x/crypto | golang.org/x/crypto/ssh | 0 – before 0.52.0 |
Weakness: CWE-1284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://go.dev/issue/79565
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI
- https://go.dev/cl/781641
- https://go.dev/cl/781661
- https://pkg.go.dev/vuln/GO-2026-5018
- https://access.redhat.com/security/cve/CVE-2026-39829 vdb-entry, x_refsource_REDHAT
- RHBZ#2480681 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48151 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36199 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37072 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35833 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49944 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67450 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29455 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37123 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61314 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59467 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66022 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:46903 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57191 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54400 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26546 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36319 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26547 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36625 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36207 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60454 vendor-advisory, x_refsource_REDHAT