Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability
The maintainers of the FreeBSD Project have released security updates to address a high-severity flaw in OpenSSH that attackers could potentially exploit to ex…
Recent OpenSSH RCE Bug Explained: Impact & Mitigations
In an era where cybersecurity threats loom larger than ever, the discovery of a Remote Code Execution (RCE) vulnerability in OpenSSH by Qualys' Threat Research…
New OpenSSH Vulnerability Discovered: Potential Remote Code Execution Risk
Select versions of the OpenSSH secure networking suite are susceptible to a new vulnerability that can trigger remote code execution (RCE).The vulnerability, t…
Mageia 2024-0250: openssh Security Advisory Updates
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems. (CVE-2024-6387) References: - https://bugs.mageia.org/show_bug.cgi?id=33346
Fedora 40: openssh 2024-dc89a2e1bf Security Advisory Updates
Backport fix for CVE-2024-6387 (rhbz#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
ArchLinux: 202407-1: openssh: authentication bypass
The package openssh before version 9.8p1-1 is vulnerable to authentication bypass.
Gentoo: GLSA-202407-09: OpenSSH: Remote Code ExecutionSecurity Advisory Updates
A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges.
New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems
OpenSSH maintainers have released security updates to contain a critical security flaw that could result in unauthenticated remote code execution with root pri…
Critical OpenSSH RCE Bugs Fixed
Two critical remote code execution (RCE) vulnerabilities have been found in OpenSSH (CVE-2023-28531 and CVE-2023-38408). Because these bugs are simple to explo…
SciLinux: SLSA-2023-4382-1 Important: openssh on SL7.x x86_64
openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, …
RedHat: RHSA-2023-4428:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a se…
RedHat: RHSA-2023-4413:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-4419:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important.…
Ubuntu 6242-2: OpenSSH vulnerability
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
RedHat: RHSA-2023-4329:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
Ubuntu 6242-1: OpenSSH vulnerability
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Gentoo: GLSA-202307-01: OpenSSH: Remote Code Execution
Multiple vulnerbilities have been discovered in OpenSSH, the worst of which could result in remote code execution.
RedHat: RHSA-2023-2645:01 Moderate: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. …
OpenSSH Releases Patch for New Pre-Auth Double Free Vulnerability
The maintainers of OpenSSH have released OpenSSH 9.2 to address a number of security bugs, including a memory safety vulnerability in the OpenSSH server (sshd)…
Ubuntu 5666-1: OpenSSH vulnerability
OpenSSH could be made to run arbitrary code if it some non-default configuration are in use.
SciLinux: SLSA-2021-4782-1 Moderate: openssh on SL7.x x86_
openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured (CVE-2021-41617) For more details about the security iss…
RedHat: RHSA-2021-4782:04 Moderate: openssh security upda
An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. …
Mageia 2021-0261: openssh security upda
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy op…