ig (0.53.2-ubuntu24.04u15) noble; urgency=low

  * [CRITICAL] CVE-2026-34182 in openssl (3.3.5-5.azl3), openssl-libs (3.3.5-5.azl3) - openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
  * [HIGH] CVE-2026-39827 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - An authenticated SSH client that repeatedly opened channels which were...
  * [HIGH] CVE-2026-39828 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execut...
  * [HIGH] CVE-2026-39829 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via craft...
  * [HIGH] CVE-2026-39830 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resou...
  * [HIGH] CVE-2026-39835 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - SSH servers which use CertChecker as a public key callback without set...
  * [HIGH] CVE-2026-42508 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhost...
  * [HIGH] CVE-2026-46595 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to...
  * [HIGH] CVE-2026-46597 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - An incorrectly placed cast from bytes to int allowed for server-side p...
  * [HIGH] CVE-2026-53488 in github.com/containerd/containerd (v1.7.32) - CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3
  * [LOW] CVE-2026-28387 in openssl (3.3.5-5.azl3), openssl-libs (3.3.5-5.azl3) - openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA...
  * [MEDIUM] CVE-2026-39831 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nis...
  * [MEDIUM] CVE-2026-39832 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - When adding a key to a remote agent constraint extensions such as rest...
  * [MEDIUM] CVE-2026-39833 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - The in-memory keyring returned by NewKeyring() silently accepted keys...
  * [MEDIUM] CVE-2026-39834 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - When writing data larger than 4GB in a single Write call on an SSH cha...
  * [MEDIUM] CVE-2026-46598 in golang.org/x/crypto (v0.51.0), golang.org/x/crypto (v0.51.0) - golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial...
  * [MEDIUM] CVE-2026-47262 in github.com/containerd/containerd (v1.7.32) - CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3
 -- azcu-bot <azcu-publishing@microsoft.com>  Wed, 24 Jun 2026 00:00:00 +0000

