ClosedMediumPatched
GitHub's RSA SSH host key briefly exposed in a public repo
GitHub (github.com SSH)
GitHub's private RSA SSH host key for github.com was briefly exposed in a public repository. GitHub rotated it as a precaution, which meant anyone connecting over SSH with RSA saw a host key mismatch warning until they updated known_hosts.
Why this severity: Precautionary key rotation; GitHub said there was no evidence of misuse
- Started
- Mar 24, 2023
- Closed
- Mar 24, 2023
Affected
Not published yet
Fixed in
No fixed release yet
Timeline1
GitHub replaces its RSA SSH host key; users must update known_hosts
Source
Advisories1
Get an email when a new major security incident drops. No spam, unsubscribe any time.
