THREATIST.IORead the docs RHTAS 1.0.1 - GA Release Of the Policy Controller Operator
Released 2026-07-09 · Red Hat rating Important · View on Red Hat →
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop.
The RSA and DSA public key parsers did not enforce size limits on key parameters.
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a sec…
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate.