Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 40: openssh 2024-dc89a2e1bf Security Advisory Updates
Backport fix for CVE-2024-6387 (rhbz#2294879) Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8
ArchLinux: 202407-1: openssh: authentication bypass
The package openssh before version 9.8p1-1 is vulnerable to authentication bypass.
Gentoo: GLSA-202407-09: OpenSSH: Remote Code ExecutionSecurity Advisory Updates
A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges.
Ubuntu 6859-1: OpenSSH Security Advisory Updates
OpenSSH could be made to bypass authentication and remotely access systems without proper credentials.
New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems
OpenSSH maintainers have released security updates to contain a critical security flaw that could result in unauthenticated remote code execution with root pri…
OpenSSH Introduces Options to Penalize Undesirable Behavior
An update to OpenSSH , an open-source implementation of the Secure Shell (SSH) protocol, will introduce options to penalize unwanted behavior and increase secu…
Debian LTS: DLA-3532-1: openssh security update
It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote atta…
Ubuntu 6279-1: OpenSSH update
A hardening measure was added to OpenSSH.
Critical OpenSSH RCE Bugs Fixed
Two critical remote code execution (RCE) vulnerabilities have been found in OpenSSH (CVE-2023-28531 and CVE-2023-38408). Because these bugs are simple to explo…
SciLinux: SLSA-2023-4382-1 Important: openssh on SL7.x x86_64
openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, …
RedHat: RHSA-2023-4428:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a se…
RedHat: RHSA-2023-4413:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-4419:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important.…
Ubuntu 6242-2: OpenSSH vulnerability
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
RedHat: RHSA-2023-4329:01 Important: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
Ubuntu 6242-1: OpenSSH vulnerability
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Gentoo: GLSA-202307-01: OpenSSH: Remote Code Execution
Multiple vulnerbilities have been discovered in OpenSSH, the worst of which could result in remote code execution.
Slackware: 2023-200-02: openssh Security Update
New openssh packages are available for Slackware 15.0 and -current to fix a security issue.
RedHat: RHSA-2023-2645:01 Moderate: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. …
Slackware: 2023-075-02: openssh Security Update
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
OpenSSH Releases Patch for New Pre-Auth Double Free Vulnerability
The maintainers of OpenSSH have released OpenSSH 9.2 to address a number of security bugs, including a memory safety vulnerability in the OpenSSH server (sshd)…
Slackware: 2023-033-01: openssh Security Update
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
Ubuntu 5666-1: OpenSSH vulnerability
OpenSSH could be made to run arbitrary code if it some non-default configuration are in use.