Description
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dropbear | 2022.83-4 | — |
| Debian 14 | erlang | 1:25.3.2.8+dfsg-1 | — |
| Debian 14 | filezilla | 3.66.4-1 | — |
| Debian 14 | golang-go.crypto | 1:0.17.0-1 | — |
| Debian 14 | libssh | 0.10.6-1 | — |
| Debian 14 | libssh2 | 1.11.0-4 | — |
| Debian 14 | openssh | 1:9.6p1-1 | — |
| Debian 14 | paramiko | 3.4.0-1 | — |
| Debian 14 | php-phpseclib | 2.0.46-1 | — |
| Debian 14 | php-phpseclib3 | 3.0.35-1 | — |
| Debian 14 | proftpd-dfsg | 1.3.8.b+dfsg-1 | — |
| Debian 14 | proftpd-mod-proxy | 0.9.3-1 | — |
| Debian 14 | putty | 0.80-1 | — |
| Debian 14 | python-asyncssh | 2.15.0-1 | — |
| Debian 14 | tinyssh | 20230101-4 | — |
| Debian 14 | trilead-ssh2 | No fix yet | — |
| Debian 13 | dropbear | 2022.83-4 | — |
| Debian 13 | erlang | 1:25.3.2.8+dfsg-1 | — |
| Debian 13 | filezilla | 3.66.4-1 | — |
| Debian 13 | golang-go.crypto | 1:0.17.0-1 | — |
| Debian 13 | libssh | 0.10.6-1 | — |
| Debian 13 | libssh2 | 1.11.0-4 | — |
| Debian 13 | openssh | 1:9.6p1-1 | — |
| Debian 13 | paramiko | 3.4.0-1 | — |
| Debian 13 | php-phpseclib | 2.0.46-1 | — |
| Debian 13 | php-phpseclib3 | 3.0.35-1 | — |
| Debian 13 | phpseclib | 1.0.22-1 | — |
| Debian 13 | proftpd-dfsg | 1.3.8.b+dfsg-1 | — |
| Debian 13 | proftpd-mod-proxy | 0.9.3-1 | — |
| Debian 13 | putty | 0.80-1 | — |
| Debian 13 | python-asyncssh | 2.15.0-1 | — |
| Debian 13 | tinyssh | 20230101-4 | — |
| Debian 13 | trilead-ssh2 | No fix yet | — |
| Debian 12 | dropbear | 2022.83-1+deb12u1 | — |
| Debian 12 | erlang | 1:25.2.3+dfsg-1+deb12u1 | DSA-5906-1 |
| Debian 12 | filezilla | 3.63.0-1+deb12u3 | — |
| Debian 12 | libssh | 0.10.6-0+deb12u1 | DSA-5591-1 |
| Debian 12 | openssh | 1:9.2p1-2+deb12u2 | DSA-5586-1 |
| Debian 12 | php-phpseclib | 2.0.42-1+deb12u1 | DSA-5600-1 |
| Debian 12 | php-phpseclib3 | 3.0.19-1+deb12u2 | DSA-5601-1 |
| Debian 12 | phpseclib | 1.0.20-1+deb12u1 | DSA-5599-1 |
| Debian 12 | proftpd-dfsg | 1.3.8+dfsg-4+deb12u3 | — |
| Debian 12 | proftpd-mod-proxy | 0.9.2-1+deb12u1 | — |
| Debian 12 | putty | 0.78-2+deb12u1 | DSA-5588-1 |
| Debian 12 | python-asyncssh | 2.10.1-2+deb12u1 | DSA-5750-1 |
| Debian 12 | tinyssh +3 | No fix yet | — |
| Debian 11 | erlang | 1:23.2.6+dfsg-1+deb11u2 | DLA-4132-1 |
| Debian 11 | libssh | 0.9.8-0+deb11u1 | DSA-5591-1 |
| Debian 11 | openssh | 1:8.4p1-5+deb11u3 | DSA-5586-1 |
| Debian 11 | php-phpseclib | 2.0.30-2+deb11u1 | DSA-5600-1 |
| Debian 11 | phpseclib | 1.0.19-3+deb11u1 | DSA-5599-1 |
| Debian 11 | proftpd-dfsg | 1.3.7a+dfsg-12+deb11u3 | DLA-3975-1 |
| Debian 11 | putty | 0.74-1+deb11u1 | DSA-5588-1 |
| Debian 11 | python-asyncssh | 2.5.0-0.1+deb11u1 | DLA-3899-1 |
| Debian 10 | openssh | 1:7.9p1-10+deb10u4 | DLA-3694-1 |
| Debian 10 | php-phpseclib | 2.0.30-2~deb10u2 | DLA-3718-1 |
| Debian 10 | phpseclib | 1.0.19-3~deb10u2 | DLA-3719-1 |
| Debian 10 | putty | 0.74-1+deb11u1~deb10u1 | DLA-3794-1 |
| Debian 10 | python-asyncssh | 1.12.2-1+deb10u1 | DLA-3730-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | dropbear +3 | No fix yet | — |
| Ubuntu 26.04 LTS | dropbear +2 | No fix yet | — |
| Ubuntu 25.10 | dropbear +3 | No fix yet | — |
| Ubuntu 24.04 LTS | filezilla | 3.66.4-1 | — |
| Ubuntu 24.04 LTS | openssh | 1:9.6p1-3ubuntu1 | — |
| Ubuntu 24.04 LTS | paramiko | 2.12.0-2ubuntu4 | — |
| Ubuntu 24.04 LTS | proftpd-dfsg | 1.3.8.b+dfsg-1ubuntu0.1 | USN-7297-1 |
| Ubuntu 24.04 LTS | putty +2 | No fix yet | — |
| Ubuntu 24.04 LTS | python-asyncssh | 2.10.1-2ubuntu0.1 | USN-7051-1 |
| Ubuntu 22.04 LTS | dropbear | 2020.81-5ubuntu0.1 | USN-7292-1 |
| Ubuntu 22.04 LTS | filezilla | 3.58.0-1ubuntu0.1 | USN-6589-1 |
| Ubuntu 22.04 LTS | libssh | 0.9.6-2ubuntu0.22.04.2 | USN-6561-1 |
| Ubuntu 22.04 LTS | openssh | 1:8.9p1-3ubuntu0.5 | USN-6560-1 |
| Ubuntu 22.04 LTS | paramiko | 2.9.3-0ubuntu1.2 | USN-6598-1 |
| Ubuntu 22.04 LTS | phpseclib | 1.0.20-1+deb12u3build0.22.04.1 | USN-8769-1 |
| Ubuntu 22.04 LTS | proftpd-dfsg | 1.3.7c+dfsg-1ubuntu0.1 | USN-7297-1 |
| Ubuntu 22.04 LTS | putty +1 | No fix yet | — |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | filezilla | 3.46.3-1ubuntu0.1 | USN-6589-1 |
| Ubuntu 20.04 LTS | libssh | 0.9.3-2ubuntu2.4 | USN-6561-1 |
| Ubuntu 20.04 LTS | openssh | 1:8.2p1-4ubuntu0.10 | USN-6560-1 |
| Ubuntu 20.04 LTS | paramiko | 2.6.0-2ubuntu0.3 | USN-6598-1 |
| Ubuntu 20.04 LTS | proftpd-dfsg | 1.3.6c-2ubuntu0.1 | USN-7297-1 |
| Ubuntu 20.04 LTS | putty +1 | No fix yet | — |
| Ubuntu 20.04 LTS | python-asyncssh | 1.12.2-1ubuntu0.1 | USN-7051-1 |
| Ubuntu 18.04 LTS | putty +3 | No fix yet | — |
| Ubuntu 16.04 LTS | putty +3 | No fix yet | — |
| Ubuntu 14.04 LTS | paramiko | No fix yet | — |
| Ubuntu Pro FIPS 20.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssh | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssh | 1:8.2p1-4ubuntu0.fips.0.10 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssh | 1:7.9p1-10~ubuntu18.04.fips.0.9 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssh | 1:7.2p2-4ubuntu2.fips.2.10.5 | — |
| Ubuntu Pro 26.04 LTS | golang-go.crypto | No fix yet | — |
| Ubuntu Pro 26.04 LTS | phpseclib | 1.0.24-1ubuntu0.1~esm1 | USN-8769-1 |
| Ubuntu Pro 24.04 LTS | golang-go.crypto | No fix yet | — |
| Ubuntu Pro 24.04 LTS | phpseclib | 1.0.23-1ubuntu0.1~esm1 | USN-8769-1 |
| Ubuntu Pro 22.04 LTS | golang-go.crypto | No fix yet | — |
| Ubuntu Pro 22.04 LTS | python-asyncssh | 2.5.0-1ubuntu0.1~esm1 | USN-7051-1 |
| Ubuntu Pro 20.04 LTS | dropbear | 2019.78-2ubuntu0.1~esm1 | USN-7292-1 |
| Ubuntu Pro 20.04 LTS | golang-go.crypto | No fix yet | — |
| Ubuntu Pro 20.04 LTS | phpseclib | 1.0.18-2ubuntu0.1~esm2 | USN-8769-1 |
| Ubuntu Pro 18.04 LTS | dropbear | 2017.75-3ubuntu0.1~esm1 | USN-7292-1 |
| Ubuntu Pro 18.04 LTS | lxd | 3.0.3-0ubuntu1~18.04.2+esm1 | USN-6738-1 |
| Ubuntu Pro 18.04 LTS | openssh | 1:7.6p1-4ubuntu0.7+esm3 | USN-6560-2 |
| Ubuntu Pro 18.04 LTS | phpseclib | 1.0.9-1ubuntu0.1~esm2 | USN-8769-1 |
| Ubuntu Pro 18.04 LTS | python-asyncssh +1 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | lxd | 2.0.11-0ubuntu1~16.04.4+esm1 | USN-6738-1 |
| Ubuntu Pro 16.04 LTS | openssh | 1:7.2p2-4ubuntu2.10+esm5 | USN-6560-2 |
| Ubuntu Pro 16.04 LTS | paramiko +1 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | phpseclib | 1.0.1-3ubuntu0.1+esm1 | USN-8769-1 |
| Ubuntu Pro 14.04 LTS | openssh | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | buildah +1 | 1:1.31.4-1.el9_3 | RHSA-2024:1150 |
| RHEL 9 | libssh +2 | 0.10.4-12.el9_3 | RHBA-2024:1127 |
| RHEL 9 | openssh +4 | 8.7p1-34.el9_3.3 | RHSA-2024:1130 |
| RHEL 9 | pam_ssh_agent_auth | 0.10.4-5.34.el9_3.3 | RHSA-2024:1130 |
| RHEL 9 | podman +5 | 2:4.6.1-8.el9_3 | RHBA-2024:1136 |
| RHEL 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+21209+52deeb51 | RHSA-2024:2988 |
| RHEL 8 | buildah +1 | 2:1.33.6-2.module+el8.10.0+21371+46937ece | RHSA-2024:2988 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+21373+0d273fdf | RHSA-2024:2988 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a | RHSA-2024:2988 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+21196+3f0abbca | RHSA-2024:2988 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 | RHSA-2024:2988 |
| RHEL 8 | containers-common | 2:1-81.module+el8.10.0+21340+c6c7475a | RHSA-2024:2988 |
| RHEL 8 | crit +4 | 3.18-4.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+21340+c6c7475a | RHSA-2024:2988 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+20412+95ee28e2 | RHSA-2024:2988 |
| RHEL 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
| RHEL 8 | libssh +2 | 0.9.6-13.el8_9 | RHSA-2024:0628 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+21306+6be40ce7 | RHSA-2024:2988 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+20565+a40ba0e5 | RHSA-2024:2988 |
| RHEL 8 | openssh +6 | 8.0p1-19.el8_9.2 | RHSA-2024:0606 |
| RHEL 8 | pam_ssh_agent_auth | 0.10.3-7.19.el8_9.2 | RHSA-2024:0606 |
| RHEL 8 | podman +6 | 3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1 | RHSA-2024:2988 |
| RHEL 8 | python-podman +1 | 4.9.0-1.module+el8.10.0+21196+3f0abbca | RHSA-2024:2988 |
| RHEL 8 | runc | 1:1.1.12-1.module+el8.10.0+21251+62b7388c | RHSA-2024:2988 |
| RHEL 8 | skopeo +1 | 2:1.14.3-0.1.module+el8.10.0+21251+62b7388c | RHSA-2024:2988 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+21306+6be40ce7 | RHSA-2024:2988 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 | RHSA-2024:2988 |
| RHEL 8 | udica | 0.2.6-20.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Serverless 1 | openshift-serverless-clients | 1.10.0-6.el8 | RHSA-2024:0880 |
| RHEL 9.2 EUS | libssh +2 | 0.10.4-9.el9_2 | RHSA-2024:0499 |
| RHEL 9.2 EUS | openssh +4 | 8.7p1-30.el9_2.3 | RHSA-2024:0455 |
| RHEL 9.2 EUS | pam_ssh_agent_auth | 0.10.4-5.30.el9_2.3 | RHSA-2024:0455 |
| RHEL 8.8 EUS | libssh +2 | 0.9.6-13.el8_8 | RHSA-2024:0625 |
| RHEL 8.8 EUS | openssh +6 | 8.0p1-19.el8_8.2 | RHSA-2024:0594 |
| RHEL 8.8 EUS | pam_ssh_agent_auth | 0.10.3-7.19.el8_8.2 | RHSA-2024:0594 |
| RHEL 8.6 EUS | libssh +2 | 0.9.6-4.el8_6 | RHSA-2024:0538 |
| RHEL 8.6 EUS | openssh +6 | 8.0p1-15.el8_6.3 | RHSA-2024:0429 |
| RHEL 8.6 EUS | pam_ssh_agent_auth | 0.10.3-7.15.el8_6.3 | RHSA-2024:0429 |
| Red Hat OpenStack 17 | python-paramiko +1 | 2.11.0-2.el8ost | RHSA-2024:2768, RHSA-2024:2735 |
| Red Hat OpenShift 4 | buildah +1 | 1:1.29.1-20.2.rhaos4.15.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | butane +1 | 0.20.0-1.rhaos4.15.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-1.1.rhaos4.15.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | cri-o | 1.28.3-14.rhaos4.15.git33aabd8.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | cri-tools | 1.28.0-3.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | ignition +1 | 2.16.2-2.rhaos4.15.el9 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | openshift +1 | 4.15.0-202402142009.p0.g6216ea1.assembly.stream.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.15.0-202402070507.p0.g48dcf59.assembly.stream.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-14.4.rhaos4.14.el8 | RHSA-2024:3918, RHSA-2023:7201 |
| Red Hat OpenShift 4 | runc | 4:1.1.12-1.rhaos4.15.el8 | RHSA-2023:7201 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.2-21.1.rhaos4.15.el8 | RHSA-2023:7201 |
| Red Hat Ocp Tools 4 | jenkins | 2.440.3.1716387933-3.el8 | RHSA-2024:4597, RHSA-2024:3636, RHSA-2024:3635 |
| Red Hat Ocp Tools 4 | jenkins-2-plugins | 4.12.1716445211-1.el8 | RHSA-2024:4597, RHSA-2024:3636, RHSA-2024:3635 |
| Red Hat JBoss EAP 8 | eap8-apache-sshd | 2.12.0-1.redhat_00001.1.el8eap | RHSA-2024:1193, RHSA-2024:1192 |
| Red Hat JBoss EAP 8 | eap8-eclipse-jgit | 6.6.1.202309021850-1.r_redhat_00001.1.el8eap | RHSA-2024:1193, RHSA-2024:1192 |
| Red Hat JBoss EAP 8 | eap8-log4j | 2.19.0-2.redhat_00001.1.el8eap | RHSA-2024:1193, RHSA-2024:1192 |
| Red Hat JBoss EAP 8 | eap8-lucene-core +6 | 8.11.2-2.redhat_00001.1.el8eap | RHSA-2024:1193, RHSA-2024:1192 |
| Red Hat JBoss EAP 8 | eap8-parsson | 1.1.5-1.redhat_00001.1.el8eap | RHSA-2024:1193, RHSA-2024:1192 |
| Red Hat JBoss EAP 8 | eap8-wildfly +3 | 8.0.1-3.GA_redhat_00002.1.el8eap | RHSA-2024:1193, RHSA-2024:1192 |
| Red Hat JBoss EAP 7 | eap7-activemq-artemis +15 | 2.16.0-18.redhat_00052.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-apache-cxf +3 | 3.4.10-2.redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-apache-sshd | 2.12.1-1.redhat_00001.1.el7eap | RHSA-2024:1196 |
| Red Hat JBoss EAP 7 | eap7-eclipse-jgit | 5.13.3.202401111512-1.r_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-elytron-web +1 | 1.9.4-1.Final_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.3.21-1.Final_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-hibernate +4 | 5.3.36-1.Final_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-infinispan +9 | 11.0.18-2.Final_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-jberet +1 | 1.3.9-3.SP3_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-jboss-annotations-api_1.3_spec | 2.0.1-3.Final_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-jboss-cert-helper +1 | 1.1.2-1.redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.27-4.SP2_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +2 | 1.10.0-35.Final_redhat_00034.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-jboss-xnio-base | 3.8.12-1.SP2_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-jgroups-kubernetes | 1.0.17-1.Final_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-lucene-core +7 | 5.5.5-6.redhat_2.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-lucene-grouping | 5.5.5-6.redhat_2.1.el8eap | RHSA-2024:1675 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.2.30-1.SP1_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-wildfly +4 | 7.4.16-4.GA_redhat_00002.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron +1 | 1.15.22-1.Final_redhat_00001.1.el7eap | RHSA-2024:1676, RHSA-2024:1675, RHSA-2024:1674 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk17 | 7.4.16-4.GA_redhat_00002.1.el8eap | RHSA-2024:1676, RHSA-2024:1675 |
| Red Hat Ceph Storage 8 | ceph +27 | 2:19.2.1-423.el9cp | RHSA-2026:79101 |
| Red Hat Ceph Storage 7 | ceph +25 | 2:18.2.1-329.el8cp | RHSA-2025:4664 |
| Red Hat Ceph Storage 7 | cephadm | 2:18.2.1-329.el9cp | RHSA-2025:4664 |
| Red Hat Ceph Storage 7 | liboath +1 | 2.6.12-1.el8cp | RHSA-2025:4664 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | buildah +1 | 1:1.31.4-1.el9_3 | ALSA-2024:1150 |
| AlmaLinux 9 | openssh +4 | 8.7p1-34.el9_3.3 | ALSA-2024:1130 |
| AlmaLinux 9 | pam_ssh_agent_auth | 0.10.4-5.34.el9_3.3 | ALSA-2024:1130 |
| AlmaLinux 8 | libssh +2 | 0.9.6-13.el8_9 | ALSA-2024:0628 |
| AlmaLinux 8 | openssh +6 | 8.0p1-19.el8_9.2 | ALSA-2024:0606 |
| AlmaLinux 8 | pam_ssh_agent_auth | 0.10.3-7.19.el8_9.2 | ALSA-2024:0606 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | containers-common | 2:1-81.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | libslirp | 4.4.0-1.module+el8.9.0+1445+07728297 | RLSA-2024:2988 |
| Rocky Linux 8 | libssh | 0.9.6-13.el8_9 | RLSA-2024:0628 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | openssh | 8.0p1-19.el8_9.2 | RLSA-2024:0606 |
| Rocky Linux 8 | python-podman | 4.9.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | runc | 1:1.1.12-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2024:2988 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLES 15 SP5 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP5 | cosign | 2.2.3-150400.3.17.1 | SUSE-SU-2024:0430-1 |
| SLES 15 SP5 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SLES 15 SP5 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP5 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLES 15 SP5 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLES 15 SP5 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLES 15 SP5 | rekor | 1.3.5-150400.4.19.1 | SUSE-SU-2024:0460-1 |
| SLES 15 SP4 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLES 15 SP4 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP4 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SLES 15 SP4 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP4 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLES 15 SP4 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLES 15 SP4 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLES 15 SP4 | python-paramiko | 3.4.0-150400.13.6.1 | SUSE-SU-2024:0035-1 |
| SLES 15 SP3 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLES 15 SP3 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP3 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SLES 15 SP3 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP3 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLES 15 SP3 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLES 15 SP3 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLES 15 SP2 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLES 15 SP2 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP2 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLES 15 SP2 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLES 15 SP2 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLES 15 SP2 | openssh +1 | 8.1p1-150200.5.43.1 | SUSE-SU-2023:4904-1 |
| SLES 15 SP1 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0006-1 |
| SLES 15 SP1 | openssh +1 | 7.9p1-150100.6.34.1 | SUSE-SU-2023:4905-1 |
Show 25 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | libssh | 0.9.8-3.12.2 | SUSE-SU-2024:0539-1 |
| SLES 12 SP5 | libssh2_org | 1.11.0-29.9.1 | SUSE-SU-2024:0543-1, SUSE-SU-2023:4946-1 |
| SLES 12 SP5 | openssh +1 | 7.2p2-81.8.1 | SUSE-SU-2023:4903-1 |
| SLES 3 | python-paramiko | 3.4.0-150400.13.6.1 | SUSE-SU-2024:0035-1 |
| SLES for SAP 15 SP4 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLES for SAP 15 SP4 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLES for SAP 15 SP4 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SLES for SAP 15 SP4 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLES for SAP 15 SP4 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLES for SAP 15 SP4 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLES for SAP 15 SP4 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLES for SAP 15 SP4 | python-paramiko | 3.4.0-150400.13.6.1 | SUSE-SU-2024:0035-1 |
| SLES for SAP 15 SP3 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLES for SAP 15 SP3 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLES for SAP 15 SP3 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SLES for SAP 15 SP3 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLES for SAP 15 SP3 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLES for SAP 15 SP3 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLES for SAP 15 SP3 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLES for SAP 15 SP2 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLES for SAP 15 SP2 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLES for SAP 15 SP2 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLES for SAP 15 SP2 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLES for SAP 15 SP2 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLES for SAP 15 SP2 | openssh +1 | 8.1p1-150200.5.43.1 | SUSE-SU-2023:4904-1 |
| SLES for SAP 15 SP1 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0006-1 |
| SLES for SAP 15 SP1 | openssh +1 | 7.9p1-150100.6.34.1 | SUSE-SU-2023:4905-1 |
| SLES for SAP 12 SP5 | libssh | 0.9.8-3.12.2 | SUSE-SU-2024:0539-1 |
| SLES for SAP 12 SP5 | libssh2_org | 1.11.0-29.9.1 | SUSE-SU-2024:0543-1, SUSE-SU-2023:4946-1 |
| SLES for SAP 12 SP5 | openssh +1 | 7.2p2-81.8.1 | SUSE-SU-2023:4903-1 |
| SLE Real Time 15 SP4 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLE Real Time 15 SP4 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0006-1 |
| SLE Real Time 15 SP4 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE Micro 6.0 | openssh | 9.6p1-2.1 | SUSE-SU-2025:20009-1 |
| SLE Micro 5.5 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLE Micro 5.5 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE Micro 5.5 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE Micro 5.4 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLE Micro 5.4 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE Micro 5.4 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE Micro 5.3 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLE Micro 5.3 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE Micro 5.3 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE Micro 5.2 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLE Micro 5.2 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE Micro 5.2 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE Micro 5.1 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLE Micro 5.1 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE Micro 5.1 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE HPC 15 SP4 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLE HPC 15 SP4 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLE HPC 15 SP4 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SLE HPC 15 SP4 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLE HPC 15 SP4 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SLE HPC 15 SP4 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE HPC 15 SP4 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE HPC 15 SP4 | python-paramiko | 3.4.0-150400.13.6.1 | SUSE-SU-2024:0035-1 |
| SLE HPC 15 SP3 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLE HPC 15 SP3 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLE HPC 15 SP3 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SLE HPC 15 SP3 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLE HPC 15 SP3 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLE HPC 15 SP3 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE HPC 15 SP3 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SLE HPC 15 SP2 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SLE HPC 15 SP2 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SLE HPC 15 SP2 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SLE HPC 15 SP2 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SLE HPC 15 SP2 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SLE HPC 15 SP2 | openssh +1 | 8.1p1-150200.5.43.1 | SUSE-SU-2023:4904-1 |
| SLE HPC 15 SP1 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0006-1 |
| SLE HPC 15 SP1 | openssh +1 | 7.9p1-150100.6.34.1 | SUSE-SU-2023:4905-1 |
| SUSE Package Hub 15 SP6 | etcd | 3.5.12-bp156.4.3.1 | openSUSE-SU-2025:0003-1 |
| SUSE Package Hub 15 SP5 | gitui | 0.26.2-bp155.2.3.1 | openSUSE-SU-2024:0135-1 |
| SUSE Package Hub 15 SP5 | proftpd | 1.3.8b-bp155.2.3.1 | openSUSE-SU-2024:0008-1, openSUSE-SU-2023:0421-1 |
| SUSE Package Hub 15 SP5 | putty | 0.80-bp155.2.3.1 | openSUSE-SU-2023:0411-1 |
| SUSE Package Hub 15 SP5 | tinyssh | 20240101-bp155.2.3.1 | openSUSE-SU-2024:0036-1 |
| SUSE Package Hub 15 SP4 | proftpd | 1.3.8b-bp155.2.3.1 | openSUSE-SU-2023:0421-1 |
| SUSE Package Hub 15 SP4 | putty | 0.80-bp154.2.3.1 | openSUSE-SU-2024:0005-1 |
| SUSE Manager Server Module 4.3 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SUSE Manager Server 4.3 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SUSE Manager Server 4.3 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SUSE Manager Server 4.3 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SUSE Manager Server 4.3 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SUSE Manager Proxy 4.3 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SUSE Manager Proxy 4.3 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| SUSE Manager Proxy 4.3 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SUSE Manager Proxy 4.3 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| SUSE Enterprise Storage 7.1 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| SUSE Enterprise Storage 7.1 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| SUSE Enterprise Storage 7.1 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| SUSE Enterprise Storage 7.1 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| SUSE Enterprise Storage 7.1 | libssh | 0.9.8-150200.13.3.1 | SUSE-SU-2024:0525-1 |
| SUSE Enterprise Storage 7.1 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| SUSE Enterprise Storage 7.1 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apache-sshd | 2.12.0-1.1 | openSUSE-SU-2024:13608-1 |
| openSUSE Tumbleweed | cheat | 4.4.2-2.1 | openSUSE-SU-2025:15487-1 |
| openSUSE Tumbleweed | cosign | 2.2.3-1.1 | openSUSE-SU-2024:13646-1 |
| openSUSE Tumbleweed | erlang | 26.2.1-1.1 | openSUSE-SU-2024:13592-1 |
| openSUSE Tumbleweed | erlang27 | 27.1.3-1.1 | openSUSE-SU-2025:15740-1 |
| openSUSE Tumbleweed | etcd +3 | 3.5.12-1.1 | openSUSE-SU-2024:13836-1, openSUSE-SU-2024:13835-1, openSUSE-SU-2024:13834-1 |
| openSUSE Tumbleweed | gitui | 0.26.2-1.1 | openSUSE-SU-2024:13979-1 |
| openSUSE Tumbleweed | jsch | 0.0.9-1.1 | openSUSE-SU-2024:13772-1, openSUSE-SU-2024:13580-1 |
| openSUSE Tumbleweed | libssh | 0.10.6-1.1 | openSUSE-SU-2024:13638-1 |
| openSUSE Tumbleweed | libssh2_org | 1.11.0-2.1 | openSUSE-SU-2024:13522-1 |
| openSUSE Tumbleweed | openssh | 9.3p2-5.1 | openSUSE-SU-2024:13517-1 |
| openSUSE Tumbleweed | proftpd | 1.3.8b-1.1 | openSUSE-SU-2024:13539-1 |
| openSUSE Tumbleweed | putty | 0.80-1.1 | openSUSE-SU-2024:13518-1 |
| openSUSE Tumbleweed | python-asyncssh | 2.14.2-1.1 | openSUSE-SU-2026:11851-1, openSUSE-SU-2024:13515-1 |
| openSUSE Tumbleweed | python-paramiko | 3.3.1-2.3 | openSUSE-SU-2026:12025-1, openSUSE-SU-2024:13523-1 |
| openSUSE Tumbleweed | rclone | 1.65.1-1.1 | openSUSE-SU-2024:13569-1 |
| openSUSE Tumbleweed | rekor | 1.3.5-1.1 | openSUSE-SU-2024:13652-1 |
| openSUSE Tumbleweed | ssh-audit | 3.1.0-1.1 | openSUSE-SU-2024:13530-1 |
| openSUSE Tumbleweed | teleport | 14.3.0-1.1 | openSUSE-SU-2024:13565-1 |
| openSUSE Tumbleweed | tinyssh | 20240101-1.1 | openSUSE-SU-2024:13628-1 |
| openSUSE Leap 16.0 | cheat | 4.4.2-bp160.2.1 | openSUSE-SU-2025:20177-1 |
| openSUSE Leap 15.6 | etcd | 3.5.12-bp156.4.3.1 | openSUSE-SU-2025:0003-1, SUSE-SU-2024:3656-1 |
| openSUSE Leap 15.5 | apache-parent | 31-150200.3.12.1 | SUSE-SU-2024:0224-1 |
| openSUSE Leap 15.5 | apache-sshd | 2.12.0-150200.5.8.1 | SUSE-SU-2024:0224-1 |
| openSUSE Leap 15.5 | bouncycastle | 1.77-150200.3.24.1 | SUSE-SU-2024:0327-1 |
| openSUSE Leap 15.5 | cosign | 2.2.3-150400.3.17.1 | SUSE-SU-2024:0430-1 |
| openSUSE Leap 15.5 | erlang | 23.3.4.19-150300.3.14.1 | SUSE-SU-2024:0210-1 |
| openSUSE Leap 15.5 | etcd | 3.5.12-150000.7.6.1 | SUSE-SU-2024:3656-1 |
| openSUSE Leap 15.5 | gitui | 0.26.2-bp155.2.3.1 | openSUSE-SU-2024:0135-1 |
| openSUSE Leap 15.5 | jsch | 0.2.15-150200.11.13.1 | SUSE-SU-2024:0327-1 |
| openSUSE Leap 15.5 | jsch-agent-proxy | 0.0.9-150200.3.7.1 | SUSE-SU-2024:0974-1 |
| openSUSE Leap 15.5 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| openSUSE Leap 15.5 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| openSUSE Leap 15.5 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| openSUSE Leap 15.5 | proftpd | 1.3.8b-bp155.2.3.1 | openSUSE-SU-2024:0008-1, openSUSE-SU-2023:0421-1 |
| openSUSE Leap 15.5 | putty | 0.80-bp155.2.3.1 | openSUSE-SU-2023:0411-1 |
| openSUSE Leap 15.5 | python-paramiko | 3.4.0-150400.13.6.1 | SUSE-SU-2024:0035-1 |
| openSUSE Leap 15.5 | rekor | 1.3.5-150400.4.19.1 | SUSE-SU-2024:0460-1 |
| openSUSE Leap 15.5 | tinyssh | 20240101-bp155.2.3.1 | openSUSE-SU-2024:0036-1 |
| openSUSE Leap 15.5 | trilead-ssh2 | 217.293.v56de4d4d3515-150200.3.7.1 | SUSE-SU-2024:0972-1 |
| openSUSE Leap 15.4 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0006-1 |
| openSUSE Leap 15.4 | openssh +1 | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| openSUSE Leap 15.4 | proftpd | 1.3.8b-bp155.2.3.1 | openSUSE-SU-2023:0421-1 |
| openSUSE Leap 15.4 | putty | 0.80-bp154.2.3.1 | openSUSE-SU-2024:0005-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| openSUSE Leap Micro 5.4 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| openSUSE Leap Micro 5.4 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
| openSUSE Leap Micro 5.3 | libssh | 0.9.8-150400.3.3.1 | SUSE-SU-2024:0140-1 |
| openSUSE Leap Micro 5.3 | libssh2_org | 1.11.0-150000.4.22.1 | SUSE-SU-2024:0558-1, SUSE-SU-2024:0006-1 |
| openSUSE Leap Micro 5.3 | openssh | 8.4p1-150300.3.27.1 | SUSE-SU-2023:4902-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | buildah | 1.34.0-r1 | — |
| Alpine v3.24 | doctl | 1.102.0-r0 | — |
| Alpine v3.24 | dropbear | 2022.83-r4 | — |
| Alpine v3.24 | filezilla | 3.66.4-r0 | — |
| Alpine v3.24 | forgejo | 1.21.3.0-r0 | — |
| Alpine v3.24 | gitea | 1.21.3-r0 | — |
| Alpine v3.24 | k3s | 1.29.3.1-r0 | — |
| Alpine v3.24 | libssh | 0.10.6-r0 | — |
| Alpine v3.24 | libssh2 | 1.11.0-r1 | — |
| Alpine v3.24 | nebula | 1.8.1-r0 | — |
| Alpine v3.24 | openssh | 9.6_p1-r0 | — |
| Alpine v3.24 | pijul | 1.0.0_beta8-r1 | — |
| Alpine v3.24 | podman | 4.8.2-r1 | — |
| Alpine v3.24 | podman-tui | 0.15.0-r0 | — |
| Alpine v3.24 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.24 | putty | 0.80-r0 | — |
| Alpine v3.24 | py3-asyncssh | 2.14.2-r0 | — |
| Alpine v3.24 | py3-paramiko | 3.4.0-r0 | — |
| Alpine v3.24 | tinyssh | 20230101-r3 | — |
| Alpine v3.23 | buildah | 1.34.0-r1 | — |
| Alpine v3.23 | doctl | 1.102.0-r0 | — |
| Alpine v3.23 | dropbear | 2022.83-r4 | — |
| Alpine v3.23 | filezilla | 3.66.4-r0 | — |
| Alpine v3.23 | forgejo | 1.21.3.0-r0 | — |
| Alpine v3.23 | gitea | 1.21.3-r0 | — |
| Alpine v3.23 | k3s | 1.29.3.1-r0 | — |
| Alpine v3.23 | libssh | 0.10.6-r0 | — |
| Alpine v3.23 | libssh2 | 1.11.0-r1 | — |
| Alpine v3.23 | nebula | 1.8.1-r0 | — |
| Alpine v3.23 | openssh | 9.6_p1-r0 | — |
| Alpine v3.23 | pijul | 1.0.0_beta8-r1 | — |
| Alpine v3.23 | podman | 4.8.2-r1 | — |
| Alpine v3.23 | podman-tui | 0.15.0-r0 | — |
| Alpine v3.23 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.23 | putty | 0.80-r0 | — |
| Alpine v3.23 | py3-asyncssh | 2.14.2-r0 | — |
| Alpine v3.23 | py3-paramiko | 3.4.0-r0 | — |
| Alpine v3.23 | tinyssh | 20230101-r3 | — |
| Alpine v3.22 | buildah | 1.34.0-r1 | — |
| Alpine v3.22 | doctl | 1.102.0-r0 | — |
| Alpine v3.22 | dropbear | 2022.83-r4 | — |
| Alpine v3.22 | erlang26 | 26.2.1-r0 | — |
| Alpine v3.22 | filezilla | 3.66.4-r0 | — |
| Alpine v3.22 | forgejo | 1.21.3.0-r0 | — |
| Alpine v3.22 | gitea | 1.21.3-r0 | — |
| Alpine v3.22 | k3s | 1.29.3.1-r0 | — |
| Alpine v3.22 | libssh | 0.10.6-r0 | — |
| Alpine v3.22 | libssh2 | 1.11.0-r1 | — |
| Alpine v3.22 | nebula | 1.8.1-r0 | — |
| Alpine v3.22 | openssh | 9.6_p1-r0 | — |
| Alpine v3.22 | pijul | 1.0.0_beta8-r1 | — |
| Alpine v3.22 | podman | 4.8.2-r1 | — |
| Alpine v3.22 | podman-tui | 0.15.0-r0 | — |
| Alpine v3.22 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.22 | putty | 0.80-r0 | — |
| Alpine v3.22 | py3-asyncssh | 2.14.2-r0 | — |
| Alpine v3.22 | py3-paramiko | 3.4.0-r0 | — |
| Alpine v3.22 | tinyssh | 20230101-r3 | — |
| Alpine v3.21 | buildah | 1.34.0-r1 | — |
| Alpine v3.21 | doctl | 1.102.0-r0 | — |
| Alpine v3.21 | dropbear | 2022.83-r4 | — |
| Alpine v3.21 | erlang | 26.2.1-r0 | — |
| Alpine v3.21 | filezilla | 3.66.4-r0 | — |
| Alpine v3.21 | forgejo | 1.21.3.0-r0 | — |
| Alpine v3.21 | gitea | 1.21.3-r0 | — |
| Alpine v3.21 | k3s | 1.29.3.1-r0 | — |
| Alpine v3.21 | libssh | 0.10.6-r0 | — |
| Alpine v3.21 | libssh2 | 1.11.0-r1 | — |
| Alpine v3.21 | nebula | 1.8.1-r0 | — |
| Alpine v3.21 | openssh | 9.6_p1-r0 | — |
| Alpine v3.21 | pijul | 1.0.0_beta8-r1 | — |
| Alpine v3.21 | podman | 4.8.2-r1 | — |
| Alpine v3.21 | podman-tui | 0.15.0-r0 | — |
| Alpine v3.21 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.21 | putty | 0.80-r0 | — |
| Alpine v3.21 | py3-asyncssh | 2.14.2-r0 | — |
| Alpine v3.21 | py3-paramiko | 3.4.0-r0 | — |
| Alpine v3.21 | tinyssh | 20230101-r3 | — |
| Alpine v3.20 | buildah | 1.34.0-r1 | — |
| Alpine v3.20 | doctl | 1.102.0-r0 | — |
| Alpine v3.20 | dropbear | 2022.83-r4 | — |
| Alpine v3.20 | erlang | 26.2.1-r0 | — |
| Alpine v3.20 | filezilla | 3.66.4-r0 | — |
| Alpine v3.20 | gitea | 1.21.3-r0 | — |
| Alpine v3.20 | k3s | 1.29.3.1-r0 | — |
| Alpine v3.20 | libssh | 0.10.6-r0 | — |
| Alpine v3.20 | libssh2 | 1.11.0-r1 | — |
| Alpine v3.20 | nebula | 1.8.1-r0 | — |
| Alpine v3.20 | openssh | 9.6_p1-r0 | — |
| Alpine v3.20 | pijul | 1.0.0_beta8-r1 | — |
| Alpine v3.20 | podman | 4.8.2-r1 | — |
| Alpine v3.20 | podman-tui | 0.15.0-r0 | — |
| Alpine v3.20 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.20 | putty | 0.80-r0 | — |
| Alpine v3.20 | py3-asyncssh | 2.14.2-r0 | — |
| Alpine v3.20 | py3-paramiko | 3.4.0-r0 | — |
| Alpine v3.20 | tinyssh | 20230101-r3 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | buildah | 1.33.2-r1 | — |
| Alpine v3.19 | doctl | 1.102.0-r0 | — |
| Alpine v3.19 | dropbear | 2022.83-r4 | — |
| Alpine v3.19 | erlang | 26.2.1-r0 | — |
| Alpine v3.19 | filezilla | 3.66.4-r0 | — |
| Alpine v3.19 | gitea | 1.21.3-r0 | — |
| Alpine v3.19 | libssh | 0.10.6-r0 | — |
| Alpine v3.19 | libssh2 | 1.11.0-r1 | — |
| Alpine v3.19 | nebula | 1.7.2-r5 | — |
| Alpine v3.19 | openssh | 9.6_p1-r0 | — |
| Alpine v3.19 | pijul | 1.0.0_beta8-r0 | — |
| Alpine v3.19 | podman | 4.8.1-r1 | — |
| Alpine v3.19 | podman-tui | 0.15.0-r0 | — |
| Alpine v3.19 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.19 | putty | 0.80-r0 | — |
| Alpine v3.19 | py3-asyncssh | 2.14.2-r0 | — |
| Alpine v3.19 | py3-paramiko | 3.4.0-r0 | — |
| Alpine v3.19 | tinyssh | 20230101-r3 | — |
| Alpine v3.18 | dropbear | 2022.83-r2 | — |
| Alpine v3.18 | libssh2 | 1.11.0-r0 | — |
| Alpine v3.18 | openssh | 9.3_p2-r1 | — |
| Alpine v3.18 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.18 | putty | 0.80-r0 | — |
| Alpine v3.17 | dropbear | 2022.83-r1 | — |
| Alpine v3.17 | libssh2 | 1.11.0-r0 | — |
| Alpine v3.17 | openssh | 9.1_p1-r5 | — |
| Alpine v3.17 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.17 | putty | 0.80-r0 | — |
| Alpine v3.16 | dropbear | 2022.82-r2 | — |
| Alpine v3.16 | libssh2 | 1.11.0-r0 | — |
| Alpine v3.16 | openssh | 9.0_p1-r5 | — |
| Alpine v3.16 | proftpd | 1.3.8b-r0 | — |
| Alpine v3.16 | putty | 0.80-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | libssh +2 | 0.10.6-1.amzn2023.0.1 | ALAS2023-2024-468 |
| Amazon Linux 2023 | openssh +3 | 8.7p1-8.amzn2023.0.9 | ALAS2023-2023-462 |
| Amazon Linux 2023 | pam_ssh_agent_auth | 0.10.4-4.8.amzn2023.0.9 | ALAS2023-2023-462 |
| Amazon Linux 2 | openssh +7 | 7.4p1-22.amzn2.0.6 | ALAS2-2023-2376 |
| Amazon Linux 2 | pam_ssh_agent_auth | 0.10.3-2.22.amzn2.0.6 | ALAS2-2023-2376 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | cert-manager | 1.12.12-1 | — |
| Azure Linux 3 | cf-cli | 8.7.11-1 | — |
| Azure Linux 3 | docker-buildx | 0.14.0-1 | — |
| Azure Linux 3 | erlang | 26.2.3-1 | — |
| Azure Linux 3 | jsch +2 | No fix yet | — |
| Azure Linux 3 | kubernetes | 1.30.1-1 | — |
| Azure Linux 3 | kubevirt | 1.2.0-9 | — |
| Azure Linux 3 | libssh | 0.10.6-1 | — |
| Azure Linux 3 | libssh2 | 1.11.1-1 | — |
| Azure Linux 3 | nmap | 7.93-2 | — |
| Azure Linux 3 | node-problem-detector | 0.8.20-2 | — |
| Azure Linux 3 | packer | 1.9.5-1 | — |
| Azure Linux 3 | podman | 5.6.1-2 | — |
| Azure Linux 3 | rust | 1.90.0-1 | — |
| Azure Linux 2 (CBL-Mariner) | cert-manager | 1.11.2-7 | — |
| Azure Linux 2 (CBL-Mariner) | erlang | 25.2-1 | — |
| Azure Linux 2 (CBL-Mariner) | jsch | 0.1.55-2 | — |
| Azure Linux 2 (CBL-Mariner) | kubernetes | 1.28.4-4 | — |
| Azure Linux 2 (CBL-Mariner) | kubevirt | 0.59.0-27 | — |
| Azure Linux 2 (CBL-Mariner) | libssh | 0.10.6-1 | — |
| Azure Linux 2 (CBL-Mariner) | libssh2 | 1.9.0-4 | — |
| Azure Linux 2 (CBL-Mariner) | moby-cli | 20.10.27-2 | — |
| Azure Linux 2 (CBL-Mariner) | moby-compose | 2.17.3-5 | — |
| Azure Linux 2 (CBL-Mariner) | moby-engine | 20.10.27-1 | — |
| Azure Linux 2 (CBL-Mariner) | nmap | 7.93-2 | — |
| Azure Linux 2 (CBL-Mariner) | openssh | 8.9p1-4 | — |
| Azure Linux 2 (CBL-Mariner) | packer | 1.9.5-3 | — |
| Azure Linux 2 (CBL-Mariner) | podman +2 | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | terraform | 1.3.2-25 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | buildah +1 | 1:1.31.4-1.0.1.el9_3 | ELSA-2024-1150 |
| Oracle Linux 9 | openssh +4 | 8.7p1-34.el9_3.3 | ELSA-2024-1130 |
| Oracle Linux 9 | pam_ssh_agent_auth | 0.10.4-5.34.el9_3.3 | ELSA-2024-1130 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | buildah +1 | 2:1.33.6-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | containers-common | 2:1-81.0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | crit +4 | 3.18-4.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
| Oracle Linux 8 | libssh +2 | 0.9.6-13.el8_9 | ELSA-2024-0628 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | openssh +6 | 8.0p1-19.0.1.el8_9.2 | ELSA-2024-12164 |
| Oracle Linux 8 | pam_ssh_agent_auth | 0.10.3-7.19.0.1.el8_9.2 | ELSA-2024-12164 |
| Oracle Linux 8 | podman +6 | 3:4.9.4-0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | python3-podman | 4.9.0-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | runc | 1:1.1.12-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.3-0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | udica | 0.2.6-20.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
| Oracle Linux 7 | openssh +7 | 7.4p1-23.0.3.el7_9 | ELSA-2024-12233, ELSA-2024-12232, ELSA-2024-12158 |
| Oracle Linux 7 | pam_ssh_agent_auth | 0.10.3-2.23.0.3.el7_9 | ELSA-2024-12233, ELSA-2024-12232, ELSA-2024-12158 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r7 | — |
| Wolfi rolling | actions-runner-controller | 0.8.1-r1 | — |
| Wolfi rolling | amass | 4.2.0-r8 | — |
| Wolfi rolling | apko | 0.12.0-r2 | — |
| Wolfi rolling | argo-workflows | 3.5.2-r3 | — |
| Wolfi rolling | atlantis | 0.27.0-r3 | — |
| Wolfi rolling | bank-vaults | 1.20.4-r6 | — |
| Wolfi rolling | bom | 0.6.0-r0 | — |
| Wolfi rolling | boring-registry | 0.12.0-r1 | — |
| Wolfi rolling | buf | 1.29.0-r0 | — |
| Wolfi rolling | buildctl +1 | 0.12.4-r4 | — |
| Wolfi rolling | caddy | 2.7.6-r1 | — |
| Wolfi rolling | cadvisor | 0.48.1-r3 | — |
| Wolfi rolling | certificate-transparency | 1.1.7-r2 | — |
| Wolfi rolling | cfssl | 1.6.4-r5 | — |
| Wolfi rolling | cilium-cli | 0.15.20-r0 | — |
| Wolfi rolling | cloudflared | 2024.1.0-r1 | — |
| Wolfi rolling | conftest | 0.47.0-r3 | — |
| Wolfi rolling | cortex | 1.16.0-r3 | — |
| Wolfi rolling | cosign | 2.2.2-r1 | — |
| Wolfi rolling | crossplane-provider-aws | 0.46.1-r1 | — |
| Wolfi rolling | crossplane-provider-azure-sql +9 | 0.41.0-r1 | — |
| Wolfi rolling | dex | 2.37.0-r12 | — |
| Wolfi rolling | dgraph | 23.1.0-r6 | — |
| Wolfi rolling | docker-credential-acr-env | 0.7.0-r10 | — |
| Wolfi rolling | dockerize | 0.7.0-r3 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 3.5.0-r3 | — |
| Wolfi rolling | eksctl | 0.167.0-r1 | — |
| Wolfi rolling | falcoctl | 0.6.2-r7 | — |
| Wolfi rolling | ferretdb | 1.18.0-r0 | — |
| Wolfi rolling | flux | 2.2.1-r1 | — |
| Wolfi rolling | flux-helm-controller | 0.37.1-r1 | — |
| Wolfi rolling | flux-image-automation-controller | 0.37.0-r2 | — |
| Wolfi rolling | flux-image-reflector-controller | 0.31.1-r1 | — |
| Wolfi rolling | flux-kustomize-controller | 1.2.1-r1 | — |
| Wolfi rolling | flux-source-controller | 1.2.3-r1 | — |
| Wolfi rolling | fq | 0.10.0-r0 | — |
| Wolfi rolling | frp | 0.53.2-r1 | — |
| Wolfi rolling | fulcio | 1.4.3-r4 | — |
| Wolfi rolling | gh +1 | 2.69.0-r0 | — |
| Wolfi rolling | git-lfs | 3.4.1-r1 | — |
| Wolfi rolling | gitness | 3.0.0_beta2-r2 | — |
| Wolfi rolling | gitsign +2 | 0.8.1-r0 | — |
| Wolfi rolling | go-licenses | 1.6.0-r9 | — |
| Wolfi rolling | gobuster | 3.6.0-r9 | — |
| Wolfi rolling | gomplate | 3.11.6-r2 | — |
| Wolfi rolling | grpc-health-probe | 0.4.24-r1 | — |
| Wolfi rolling | grype | 0.73.4-r2 | — |
| Wolfi rolling | helm | 3.13.3-r1 | — |
| Wolfi rolling | helm-3 | 3.19.2-r1 | — |
| Wolfi rolling | helm-4 | 4.0.1-r1 | — |
| Wolfi rolling | helm-push | 0.10.4-r2 | — |
| Wolfi rolling | hugo | 0.121.1-r1 | — |
| Wolfi rolling | k3d +2 | 5.6.0-r6 | — |
| Wolfi rolling | k3s | 1.28.4-r0 | — |
| Wolfi rolling | k8sgpt | 0.4.1-r1 | — |
| Wolfi rolling | kaf | 0.2.6-r8 | — |
| Wolfi rolling | ko | 0.15.1-r2 | — |
| Wolfi rolling | kots | 1.104.7-r1 | — |
| Wolfi rolling | kube-fluentd-operator | 1.18.1-r1 | — |
| Wolfi rolling | kube-rbac-proxy | 0.16.0-r0 | — |
| Wolfi rolling | kube-state-metrics | 2.10.1-r1 | — |
| Wolfi rolling | kubectl-1.26 +5 | No fix yet | — |
| Wolfi rolling | kubectl-1.28 +2 | 1.28.9-r0 | — |
| Wolfi rolling | kubectl-1.29 +2 | 1.29.3-r1 | — |
| Wolfi rolling | kubeflow +12 | 1.10.0-r4 | — |
| Wolfi rolling | kubeflow-katib | 0.16.0-r2 | — |
| Wolfi rolling | kubeflow-pipelines | 2.0.5-r1 | — |
| Wolfi rolling | kubernetes-dashboard | 2.7.0-r11 | — |
| Wolfi rolling | kubernetes-event-exporter | 1.6.1-r3 | — |
| Wolfi rolling | kubescape | 3.0.3-r1 | — |
| Wolfi rolling | kubewatch | 2.5.0-r9 | — |
| Wolfi rolling | kyverno-policy-reporter | 2.17.4-r2 | — |
| Wolfi rolling | libssh | 0.10.6-r0 | — |
| Wolfi rolling | libssh2 | 1.11.0-r2 | — |
| Wolfi rolling | local-path-provisioner | 0.0.26-r2 | — |
| Wolfi rolling | melange | 0.5.5-r0 | — |
| Wolfi rolling | memcached-exporter | 0.14.1-r1 | — |
| Wolfi rolling | metrics-server | 0.6.4-r9 | — |
| Wolfi rolling | mongo-tools | 100.9.4-r1 | — |
| Wolfi rolling | nats | 0.1.1-r5 | — |
| Wolfi rolling | nats-server | 2.10.7-r1 | — |
| Wolfi rolling | nerdctl | 1.7.3-r0 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r3 | — |
| Wolfi rolling | nri-kafka | 3.6.0-r4 | — |
| Wolfi rolling | nri-mssql | 2.10.2-r5 | — |
| Wolfi rolling | nsc | 2.8.6-r0 | — |
| Wolfi rolling | oauth2-proxy | 7.5.1-r8 | — |
| Wolfi rolling | ollama | 0.1.18-r0 | — |
| Wolfi rolling | prometheus-adapter | 0.11.2-r3 | — |
| Wolfi rolling | prometheus-alertmanager | 0.26.0-r6 | — |
| Wolfi rolling | pulumi | 3.99.0-r1 | — |
| Wolfi rolling | rekor | 1.3.4-r2 | — |
| Wolfi rolling | rqlite | 8.12.3-r1 | — |
| Wolfi rolling | scorecard | 4.13.1-r4 | — |
| Wolfi rolling | secrets-store-csi-driver | 1.4.0-r2 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.5.1-r0 | — |
| Wolfi rolling | sigstore-scaffolding | 0.6.13-r1 | — |
| Wolfi rolling | skopeo | 1.14.1-r1 | — |
| Wolfi rolling | slsa-verifier | 2.5.1-r0 | — |
| Wolfi rolling | sops | 3.8.1-r2 | — |
| Wolfi rolling | spark-operator +1 | 1.1.27-r17 | — |
| Wolfi rolling | spire-server | 1.8.6-r1 | — |
| Wolfi rolling | src | 5.3.0-r0 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r8 | — |
| Wolfi rolling | step | 0.25.2-r0 | — |
| Wolfi rolling | step-ca | 0.25.2-r2 | — |
| Wolfi rolling | tekton-chains | 0.19.0-r4 | — |
| Wolfi rolling | temporal | 0.10.7-r3 | — |
| Wolfi rolling | temporal-server | 1.22.3-r3 | — |
| Wolfi rolling | temporal-ui-server | 2.21.3-r4 | — |
| Wolfi rolling | terraform | 1.5.7-r3 | — |
| Wolfi rolling | terraform-docs | 0.17.0-r1 | — |
| Wolfi rolling | terraform-provider-aws | 5.31.0-r1 | — |
| Wolfi rolling | terraform-provider-azurerm | 3.85.0-r1 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r1 | — |
| Wolfi rolling | terragrunt | 0.54.8-r0 | — |
| Wolfi rolling | tkn | 0.33.0-r3 | — |
| Wolfi rolling | trillian | 1.5.3-r3 | — |
| Wolfi rolling | trivy | 0.48.1-r0 | — |
| Wolfi rolling | up | 0.24.0-r1 | — |
| Wolfi rolling | vault-k8s | 1.3.1-r2 | — |
| Wolfi rolling | vexctl | 0.2.6-r7 | — |
| Wolfi rolling | weaviate | 1.23.0-r1 | — |
| Wolfi rolling | wireguard-go | 0.0.20230223-r7 | — |
| Wolfi rolling | zot | 2.0.0-r1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 7 repositories
-
TrixSec/CVE-2023-48795 ★ 14 · Jan 8, 2025
A Python-based tool to check for vulnerabilities in OpenSSH installations on local or remote systems by scanning specific IPs. It checks if the OpenSSH version is affected by CVE-2023-48795
-
oseasfr/Scanner_CVE_OpenSSH ★ 2 · May 21, 2026
Scanner para identificação de servidores com softwares SSH possivelmente vulnerável às CVEs CVE-2024-6387 e CVE-2023-48795.
-
fumioryoto/Terrapin-attack ★ 1 · Mar 22, 2026
SSH Terrapin Attack Vulnerability Scanner (CVE-2023-48795)
-
federiconbaez/cortex9-terrapin-strict-kex-model ★ 0 · Nov 6, 2026
Abstract state model of SSH sequence numbers and OpenSSH strict KEX for studying Terrapin (CVE-2023-48795). Not a reproduction.
-
breaksek/CVE-2023-48795 ★ 0 · Oct 25, 2026
-
hav0cx0/CVE-2023-48795 ★ 0 · May 23, 2025
Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 (Terrapin) by analyzing OpenSSH version banners via netcat. Useful for internal audits, penetration testing, and vulnerabi…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- OpenSSH Terrapin Attack - Detection javascript/cves/2023/CVE-2023-48795.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | russh | < 0.40.2 | 0.40.2 | GHSA-45x7-px36-x8w8 |
| Go | golang.org/x/crypto | < 0.17.0 | 0.17.0 | GO-2023-2402 |
| Go | golang.org/x/crypto | >= 0.1.0, < 0.17.0 | 0.17.0 | GHSA-45x7-px36-x8w8 |
| Go | golang.org/x/crypto | < 0.0.0-20231218163308-9d2ee975ef9f | 0.0.0-20231218163308-9d2ee975ef9f | GHSA-45x7-px36-x8w8 |
| PyPI | paramiko | >= 2.5.0, < 3.4.0 | 3.4.0 | PYSEC-2026-1758 |
Advisories 50
- ALSA-2024:1150 Moderate: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:1130 Moderate: openssh security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0606 Moderate: openssh security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0628 Moderate: libssh security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:4597 Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:3636 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:3635 Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:3634 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:2988 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1193 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1192 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7201 Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:0880 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.31.1 security update Red Hat Security Advisories (RHSA) · Oct 18, 2026
- RHSA-2026:79101 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix updates Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:4664 Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:3918 Red Hat Security Advisory: OpenShift Container Platform 4.14.30 packages and security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:2768 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-paramiko) security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:2735 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-paramiko) security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:1675 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:1676 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:1674 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:1196 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:1150 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:1130 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0628 Red Hat Security Advisory: libssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0625 Red Hat Security Advisory: libssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0606 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0594 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0538 Red Hat Security Advisory: libssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0499 Red Hat Security Advisory: libssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0429 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:0455 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHBA-2024:1136 Red Hat Bug Fix Advisory: podman bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHBA-2024:1127 Red Hat Bug Fix Advisory: libssh bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- SSA-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 Siemens ProductCERT · Oct 13, 2026
- SSA-794697 SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1 Siemens ProductCERT · Oct 13, 2026
- WID-SEC-2025-0168 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2024-1655 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2023-3174 SSH Protokoll: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 8, 2026
- openSUSE-SU-2026:12025-1 python313-paramiko-5.0.0-1.2 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
- openSUSE-SU-2026:11851-1 python313-asyncssh-2.24.0-1.1 on GA media SUSE / openSUSE Security Updates · Sep 23, 2026
- USN-8769-1 phpseclib vulnerability Ubuntu Security Notices (USN) · Sep 16, 2026
- WID-SEC-2024-3195 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- USN-6738-1 lxd vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-6560-2 openssh vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- WID-SEC-2026-1032 IBM Tivoli Network Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 7, 2026
- WID-SEC-2024-1637 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 1, 2026
- ICSA-25-162-05 Siemens SIMATIC S7-1500 CPU family CISA ICS & IT advisories · May 14, 2026
- USN-7297-1 ProFTPD vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7292-1 Several security issues were fixed in Dropbear Ubuntu Security Notices (USN) · Apr 27, 2026
References
- https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
- https://matt.ucc.asn.au/dropbear/CHANGES
- https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
- https://www.netsarang.com/en/xshell-update-history/
- https://www.paramiko.org/changelog.html
- https://www.openssh.com/openbsd.html
- https://github.com/openssh/openssh-portable/commits/master
- https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
- https://www.bitvise.com/ssh-server-version-history
- https://github.com/ronf/asyncssh/tags
- https://gitlab.com/libssh/libssh-mirror/-/tags
- https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/
- https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42
- https://www.openssh.com/txt/release-9.6
- https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/
- https://www.terrapin-attack.com
- https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25
- https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
- https://thorntech.com/cve-2023-48795-and-sftp-gateway/
- https://github.com/warp-tech/russh/releases/tag/v0.40.2
- https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0
- https://www.openwall.com/lists/oss-security/2023/12/18/2
- https://twitter.com/TrueSkrillor/status/1736774389725565005
- https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
- https://github.com/paramiko/paramiko/issues/2337
- https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
- https://news.ycombinator.com/item?id=38684904
- https://news.ycombinator.com/item?id=38685286
- [oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack) mailing-list
- https://github.com/mwiede/jsch/issues/457
- https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6
- https://github.com/erlang/otp/releases/tag/OTP-26.2.1
- https://github.com/advisories/GHSA-45x7-px36-x8w8
- https://security-tracker.debian.org/tracker/source-package/libssh2
- https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
- https://security-tracker.debian.org/tracker/CVE-2023-48795
- https://bugzilla.suse.com/show_bug.cgi?id=1217950
- https://bugzilla.redhat.com/show_bug.cgi?id=2254210
- https://bugs.gentoo.org/920280
- https://ubuntu.com/security/CVE-2023-48795
- https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/
- https://access.redhat.com/security/cve/cve-2023-48795
- https://github.com/mwiede/jsch/pull/461
- https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
- https://github.com/libssh2/libssh2/pull/1291
- https://forum.netgate.com/topic/184941/terrapin-ssh-attack
- https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5
- https://github.com/rapier1/hpn-ssh/releases
- https://github.com/proftpd/proftpd/issues/456
- https://github.com/TeraTermProject/teraterm/releases/tag/v5.1
- https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
- https://oryx-embedded.com/download/#changelog
- https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
- https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
- https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab
- https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
- https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC
- https://crates.io/crates/thrussh/versions
- https://github.com/NixOS/nixpkgs/pull/275249
- [oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack) mailing-list