PT-2026-90733 · Azure Linux · Buildah
Published
2026-09-02
·
Updated
2026-09-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Buildah