Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 39: openssh 2024-213f33544e Security Advisory Updates
Backport fix for CVE-2024-6387 (rhbz#2294879)
SUSE: 2024:2275-1 important: openssh Security Advisory Updates
* bsc#1226642 Cross-References: * CVE-2024-6387
Oracle9: ELSA-2024-1130: openssh security Moderate Security Update
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE: 2024:0603-1 important: openssh
* bsc#1218215 Cross-References: * CVE-2023-51385
SUSE: 2024:0604-1 important: openssh
* bsc#1218215 * bsc#1220110 Cross-References: * CVE-2023-51385
SUSE: 2024:0596-1 important: openssh
* bsc#1218215 Cross-References: * CVE-2023-51385
Oracle7: ELSA-2024-12158: openssh security Moderate (aarch64) Security
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Oracle7: ELSA-2024-12157: openssh security Moderate Security Update
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Fedora 38: openssh 2024-2aac54ebb7
Apply fix for CVE-2023-28531
Fedora 38: openssh 2024-37627e432e
Forbid shell metasymbols in username/hostname
Fedora 37: openssh 2023-79a18e1725
Security fix for [PUT CVEs HERE]
Fedora 38: openssh 2023-878e04f4ae
Security fix for CVE-2023-38408
Fedora 38: openssh 2023-123647648e
Avoid possible self-DoS attack Resolves: CVE-2023-25136
Fedora 37: openssh 2023-1176c8b10c
Avoid possible self-DoS attack Resolves: CVE-2023-25136
Fedora 33: openssh 2021-fa0e9419
Security fix for CVE-2021-41617
Fedora 35: openssh 2021-f8df0f85
Security fix for [PUT CVEs HERE]
Fedora 34: openssh 2021-1f733927
Security fix for [PUT CVEs HERE]
Fedora 33: openssh 2021-1d369808
Add fix to CVE-2021-28041
The Hidden Cost of Enterprise SSH Authentication
We often view OpenSSH security updates through the lens of standard patch management. When a new CVE hits, we scramble to update, check our versions, and retur…
Rocky Linux 8 RLSA-2026-13403 Important Update on OpenSSL Security Flaw
Important: openssh security update
Fortifying Your Linux Systems with Debian 12.9's Essential Security & Stability Updates
Debian 12.9 has just been released, offering numerous security enhancements and bug fixes vital for Linux security admins managing Debian systems. This point r…
Debian LTS: DLA-3719-1: phpseclib security update
It was discovered that phpseclib, a PHP library for arbitrary-precision integer arithmetic, was vulnerable to the so-called Terrapin Attack. The SSH transport …
NixOS 22.11 Raccoon Released with GNOME 43, KDE Plasma 5.26, and OpenSSL 3
The NixOS 22.11 release also comes with OpenSSL 3, OpenSSH 9.1, PHP 8.1, Perl 5.36, and Python 3.10 by default, support for Linode cloud images, native compila…
libpcap and tcpdump Sources Trojaned
tcpdump and libpcap were trojaned on tcpdump.org and all but 1 official mirror. This trojan, similar to the OpenSSH trojan from a few months ago, was caught Ge…