Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

SSH clients may crash on unexpected success response

published 5 days ago
Summary

Several SSH client packages can stop working if they receive an unexpected success message instead of the data they expect. This causes the program to quit suddenly, which can interrupt any scripts or automation that rely on it. Update the affected packages to the latest versions that fix the handling of these messages.

What to do
  • Update cleanstart prometheus-redis-exporter-fips to version 1.87.0-r2.
  • Update cleanstart cluster-autoscaler-fips to version 1.33.6-r1.
  • Update cleanstart kube-state-metrics to version 2.17.0-r0.
  • Update cleanstart nfs-subdir-external-provisioner to version 4.0.18-r0.
  • Update cleanstart ollama-fips to version 0.34.4-r1.
  • Update cleanstart ollama-fips to version 0.40.0-r1.
  • Update cleanstart ollama-fips to version 0.40.0-r2.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart prometheus-redis-exporter-fips < 1.87.0-r2
Fix: upgrade to 1.87.0-r2
CleanStart cleanstart cluster-autoscaler-fips < 1.33.6-r1
Fix: upgrade to 1.33.6-r1
CleanStart cleanstart kube-state-metrics < 2.17.0-r0
Fix: upgrade to 2.17.0-r0
CleanStart cleanstart nfs-subdir-external-provisioner < 4.0.18-r0
Fix: upgrade to 4.0.18-r0
CleanStart cleanstart ollama-fips < 0.34.4-r1
< 0.40.0-r1
< 0.40.0-r2
Fix: upgrade to 0.34.4-r1
Original advisory text
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
CVE-2025-47913 affects multiple packages. SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-QQ76863 · OSV
Track software like this
Free during beta