PT-2026-90733 · Azure Linux · Buildah

Published

2026-09-02

·

Updated

2026-09-02

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-99123

Affected Products

Buildah