Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3532-1: openssh security update
It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote atta…
Ubuntu 6279-1: OpenSSH update
A hardening measure was added to OpenSSH.
Critical OpenSSH RCE Bugs Fixed
Two critical remote code execution (RCE) vulnerabilities have been found in OpenSSH (CVE-2023-28531 and CVE-2023-38408). Because these bugs are simple to explo…
SciLinux: SLSA-2023-4382-1 Important: openssh on SL7.x x86_64
openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, …
RedHat: RHSA-2023-4428:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a se…
RedHat: RHSA-2023-4413:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-4419:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important.…
Ubuntu 6242-2: OpenSSH vulnerability
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
RedHat: RHSA-2023-4329:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
Ubuntu 6242-1: OpenSSH vulnerability
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Gentoo: GLSA-202307-01: OpenSSH: Remote Code Execution
Multiple vulnerbilities have been discovered in OpenSSH, the worst of which could result in remote code execution.
Slackware: 2023-200-02: openssh Security Update
New openssh packages are available for Slackware 15.0 and -current to fix a security issue.
RedHat: RHSA-2023-2645:01 Moderate: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. …
Slackware: 2023-075-02: openssh Security Update
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
OpenSSH Releases Patch for New Pre-Auth Double Free Vulnerability
The maintainers of OpenSSH have released OpenSSH 9.2 to address a number of security bugs, including a memory safety vulnerability in the OpenSSH server (sshd)…
Slackware: 2023-033-01: openssh Security Update
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
Ubuntu 5666-1: OpenSSH vulnerability
OpenSSH could be made to run arbitrary code if it some non-default configuration are in use.
SciLinux: SLSA-2021-4782-1 Moderate: openssh on SL7.x x86_
openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured (CVE-2021-41617) For more details about the security iss…
RedHat: RHSA-2021-4782:04 Moderate: openssh security upda
An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. …
Ubuntu 3809-2: OpenSSH regressi
USN-3809-1 introduced a regression in OpenSSH.
Mageia 2021-0261: openssh security upda
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy op…
Gentoo: GLSA-202105-35: OpenSSH: Multiple vulnerabiliti
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to execute arbitrary code.
OpenSSH Drops Support For SHA-1 Logins Due To Ease Of Breach
OpenSSH ' secure protocol to connect and manage remote servers ' has announced dropping support for SHA-1 logins. The serviceOpenSSH Drops Support For SHA-1 Lo…