In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-keycat | Oct 11, 2026 | Sep 21, 2026 |
| Alpine Linux | — | Upgrade openssh | Sep 1, 2026 | Aug 11, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory22 | Sep 14, 2026 | Sep 11, 2026 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 10.5 | Sep 23, 2026 | Aug 11, 2026 |
| Redhat_linux | — | Upgrade openssh-askpass-debuginfoUpgrade openssh-debugsourceUpgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-keycat-debuginfoUpgrade openssh-clients-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keysign-debuginfoUpgrade openssh-debuginfoUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-server-debuginfoUpgrade opensshUpgrade openssh-keysign | Aug 13, 2026 | Aug 11, 2026 |
| Rocky_linux | — | Upgrade openssh-keycat-debuginfoUpgrade openssh-serverUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-debugsourceUpgrade openssh-askpass-debuginfoUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-clients-debuginfoUpgrade openssh-askpassUpgrade openssh | Sep 28, 2026 | Sep 22, 2026 |
| Ubuntu | — | Upgrade openssh-clientUpgrade openssh-server | Sep 14, 2026 | Sep 3, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 11, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub