The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-serverUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-clients | Oct 11, 2026 | Sep 21, 2026 |
| Alpine Linux | — | Upgrade openssh | Sep 1, 2026 | Aug 11, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory22 | Sep 14, 2026 | Sep 11, 2026 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 10.5 | Sep 23, 2026 | Aug 11, 2026 |
| Oracle_linux | — | Upgrade openssh-serverUpgrade opensshUpgrade openssh-askpassUpgrade openssh-keysignUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-clients | Oct 22, 2026 | Aug 11, 2026 |
| Redhat_linux | — | Upgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keysign-debuginfoUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-clientsUpgrade openssh-keysignUpgrade opensshUpgrade openssh-askpassUpgrade openssh-server-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade openssh-keycatUpgrade openssh-askpass-debuginfoUpgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_auth | Aug 13, 2026 | Aug 11, 2026 |
| Rocky_linux | — | Upgrade openssh-askpassUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-clientsUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade openssh-askpass-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-debuginfo | Sep 28, 2026 | Sep 22, 2026 |
| Ubuntu | — | Upgrade openssh-clientUpgrade openssh-server | Sep 14, 2026 | Sep 3, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 11, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub