The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-ldapUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-clientsUpgrade openssh-serverUpgrade opensshUpgrade pam_ssh_agent_auth | Aug 2, 2026 | Jul 29, 2026 |
| Amazon_linux_2023 | — | Upgrade openssh-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade opensshUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-clients-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-sk-dummyUpgrade openssh-clients | Aug 10, 2026 | Jun 23, 2026 |
| Redhat_linux | — | Upgrade openssh-serverUpgrade pam_ssh_agent_auth-debuginfoNo solution existsUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-keysign-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-cavsUpgrade openssh-askpass-debuginfoUpgrade openssh-keycatUpgrade opensshUpgrade openssh-askpassUpgrade openssh-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-keysignUpgrade openssh-ldap-debuginfoUpgrade openssh-debugsourceUpgrade openssh-ldap | Jul 17, 2026 | Jun 22, 2026 |
| Rocky_linux | — | Upgrade openssh-ldapUpgrade openssh-server-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-debugsourceUpgrade openssh-serverUpgrade openssh-ldap-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-clientsUpgrade openssh-cavsUpgrade opensshUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-keycat | Aug 3, 2026 | Jul 30, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub