Количество 34
Количество 34
GHSA-89gr-r52h-f8rx
golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.
CVE-2026-39831
Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
CVE-2026-39831
The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ...
ROS-20260709-73-0026
Уязвимость portainer-ce
openSUSE-SU-2026:20838-1
Security update for hauler
openSUSE-SU-2026:20833-1
Security update for trivy
openSUSE-SU-2026:21069-1
Security update for google-guest-agent
openSUSE-SU-2026:20834-1
Security update for apptainer
openSUSE-SU-2026:21084-1
Security update for distribution
SUSE-SU-2026:2611-1
Security update for google-osconfig-agent
SUSE-SU-2026:2665-1
Security update for google-osconfig-agent
openSUSE-SU-2026:21281-1
Security update for cosign
openSUSE-SU-2026:20902-1
Security update for keybase-client
SUSE-SU-2026:2827-1
Security update for cosign
SUSE-SU-2026:2609-1
Security update for apptainer
openSUSE-SU-2026:21244-1
Security update for podman
openSUSE-SU-2026:21120-1
Security update for mcphost
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-89gr-r52h-f8rx golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed | CVSS3: 9.1 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback. | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback. | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-39831 Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh | 0% Низкий | 2 месяца назад | |
| CVE-2026-39831 The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis ... | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
 | ROS-20260709-73-0026 Уязвимость portainer-ce | CVSS3: 9.1 | 0% Низкий | 22 дня назад |
 | openSUSE-SU-2026:20838-1 Security update for hauler | 2 месяца назад | ||
| openSUSE-SU-2026:20833-1 Security update for trivy | 2 месяца назад | ||
| openSUSE-SU-2026:21069-1 Security update for google-guest-agent | около 1 месяца назад | ||
| openSUSE-SU-2026:20834-1 Security update for apptainer | 2 месяца назад | ||
| openSUSE-SU-2026:21084-1 Security update for distribution | около 1 месяца назад | ||
| SUSE-SU-2026:2611-1 Security update for google-osconfig-agent | около 1 месяца назад | ||
| SUSE-SU-2026:2665-1 Security update for google-osconfig-agent | около 1 месяца назад | ||
| openSUSE-SU-2026:21281-1 Security update for cosign | 21 день назад | ||
| openSUSE-SU-2026:20902-1 Security update for keybase-client | около 2 месяцев назад | ||
| SUSE-SU-2026:2827-1 Security update for cosign | 21 день назад | ||
| SUSE-SU-2026:2609-1 Security update for apptainer | около 1 месяца назад | ||
| openSUSE-SU-2026:21244-1 Security update for podman | 25 дней назад | ||
| openSUSE-SU-2026:21120-1 Security update for mcphost | около 1 месяца назад |
Уязвимостей на страницу