SECURITY Signal 437
OpenSSH 10.5 Fixes Security Flaws as Project Responds to AI-Assisted Bug Discovery
↗
OpenSSH 10.5 fixes several security flaws, including an ssh-agent locking bypass, and the project will release more frequently in response to AI-assisted vulnerability discovery.
Engineers running SSH should upgrade to close a hole where locked agents could still be used remotely via forwarded agents, and to fix a use-after-free in the client. The shift to more frequent releases means security fixes arrive sooner, but also implies more frequent upgrade cycles and potential operational disruption.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
The ssh-agent locking bypass allowed remote operations on locked agents via the [email protected] extension, now fixed.
The restrict keyword in authorized_keys now also applies to tunnel forwarding, which remains administratively disabled by default.
OpenSSH will publish releases more frequently because AI-assisted vulnerability reports are sometimes independently rediscovered by others, suggesting malicious actors could find them too.
THE CLUSTER