Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SciLinux: SLSA-2021-4782-1 Moderate: openssh on SL7.x x86_
openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured (CVE-2021-41617) For more details about the security iss…
RedHat: RHSA-2021-4782:04 Moderate: openssh security upda
An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. …
Ubuntu 3809-2: OpenSSH regressi
USN-3809-1 introduced a regression in OpenSSH.
Mageia 2021-0261: openssh security upda
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy op…
Gentoo: GLSA-202105-35: OpenSSH: Multiple vulnerabiliti
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to execute arbitrary code.
OpenSSH Drops Support For SHA-1 Logins Due To Ease Of Breach
OpenSSH ' secure protocol to connect and manage remote servers ' has announced dropping support for SHA-1 logins. The serviceOpenSSH Drops Support For SHA-1 Lo…
OpenSSH now supports FIDO U2F security keys for 2-factor authentication
Here's excellent news for sysadmins. You can now use a physical security key as hardware-based two-factor authentication to securely log into a remote system v…
Gentoo: GLSA-201911-01: OpenSSH: Integer overflow
An integer overflow in OpenSSH might allow an attacker to execute arbitrary code.
RedHat: RHSA-2019-3702:01 Moderate: openssh security, bug fix,
An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. …
Debian: DSA-4539-2: openssh regression update
A change introduced in openssl 1.1.1d (which got released as DSA 4539-1) requires sandboxing features which are not available in Linux kernels before 3.19, res…
Fedora 43 OpenSSH Fixes Oversized Packet Denial of Service
Fix CVE-2026-106585: Denial of service via oversized decompressed packets
SUSE OpenSSH Important Update for File and SSH Forwarding Issues
An update that solves 11 vulnerabilities and has one fix can now be installed.
SUSE OpenSSH 8.4 Update Fixes Seven SSH Security Issues
An update that solves seven vulnerabilities can now be installed.
Fedora 44 OpenSSH Fixes Oversized Packet DoS and SFTP File Write
Fix CVE-2026-106585: Denial of service via oversized decompressed packets
Oracle Linux 8 OpenSSH 8.0p1 Update Addresses Five Security Issues
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle Linux 9 OpenSSH 9.9p1 Fixes GSSAPI Denial-of-Service Flaw
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
openSUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
An update that solves two vulnerabilities can now be installed.
SUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
An update that solves two vulnerabilities can now be installed.
SUSE OpenSSH Update Fixes SSH Forwarding and Policy Bypasses
An update that solves three vulnerabilities and has one security fix can now be installed.
openSUSE OpenSSH 9.6p1 Fixes SSH Forwarding and Agent Issues
An update that solves three vulnerabilities and has one security fix can now be installed.
Oracle OpenSSH 9.9p1 Fixes GSSAPI and SFTP Issues for Users
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Mageia OpenSSH Update Fixes Authentication and SFTP Issues
Security update
SUSE OpenSSH Moderate Use-After-Free and Policy Bypass Vuln 2026-4686-1
An update that solves two vulnerabilities can now be installed.
SUSE openssh Moderate SSH Agent Vulnerability Fix Advisory 2026-24140-1
An update that solves three vulnerabilities and has one fix can now be installed.