Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora OpenSSH Critical File Control Vulnerability CVE-2026-59995 Advisory
Fedora has released an update for OpenSSH version 10.2p1, addressing multiple CVEs related to security issues and vulnerabilities, which can be installed using…
Oracle Linux 9 OpenSSH Important Security Advisory ELSA-2026-47756
Oracle Linux 9 has released updated packages for OpenSSH, addressing multiple security vulnerabilities through various fixes, including critical patches for re…
Slackware Openssh Security Advisory 2026-223-02- Upgrade Required
New OpenSSH packages for Slackware 15.0 and -current address security issues. Users can download updates and are advised to restart the sshd daemon after insta…
openSUSE Leap 16.0 Advisory 2026-21477-1 OpenSSH Important Issues
openSUSE released a security update for OpenSSH addressing eight vulnerabilities, including pre-authentication denial of service and improper file handling in …
Slackware 15.0 openssh Important Security Issues Fix Advisory 2026-187-02
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
Rocky Linux: RLSA-2026:13383 openssh security update Security Advisories Updates
Important: openssh security update
Fedora 40: openssh 2025-62f6cb2785 Security Advisory Updates
Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2…
Gentoo: GLSA-202502-01: OpenSSH: Security Advisory Updates
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
Ubuntu 7270-2: OpenSSH Security Advisory Updates
OpenSSH could be made to bypass the server identity check.
Slackware: 2025-049-01: openssh Security Advisory Update
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
Ubuntu 7270-1: OpenSSH Security Advisory Updates
Several security issues were fixed in OpenSSH.
Debian LTS: DLA-4057-1: openssh Security Advisory Updates
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
Debian: DSA-5868-1: openssh Security Advisory Updates
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enab…
Ubuntu 6560-3: OpenSSH Security Advisory Updates
OpenSSH could be made to crash or run programs as your login if it received a specially crafted input.
Ubuntu 6887-1: OpenSSH Security Advisory Updates
OpenSSH could be made to expose timing information over the network.
Mageia 2024-0250: openssh Security Advisory Updates
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems. (CVE-2024-6387) References: - https://bugs.mageia.org/show_bug.cgi?id=33346
Fedora 40: openssh 2024-dc89a2e1bf Security Advisory Updates
Backport fix for CVE-2024-6387 (rhbz#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
Gentoo: GLSA-202407-09: OpenSSH: Remote Code ExecutionSecurity Advisory Updates
A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges.
Ubuntu 6859-1: OpenSSH Security Advisory Updates
OpenSSH could be made to bypass authentication and remotely access systems without proper credentials.
SUSE: Openssh Moderate Code Exec Risk CVE-2025-61984 Advisory 2025:4097-1
* bsc#1251198 Cross-References: * CVE-2025-61984
openSUSE 2025:1576-1 moderate: OpenSSH remote access fix
openSUSE: 2025:15091-1 moderate: openssh-10.0p2-2.1
SUSE: 2025:0744-1 moderate: openssh8.4 Security Advisory Updates
* bsc#1186673 * bsc#1213004 * bsc#1213008 * bsc#1214788 * bsc#1216474
Mageia 2025-0080: openssh Security Advisory Updates
Machine-in-the-middle attack vulnerability if verifyhostkeydns is enabled. (CVE-2025-26465) References: - https://bugs.mageia.org/show_bug.cgi?id=34036