[ALSA-2026:13380] Important: openssh security update
Type:
security
Severity:
important
Release date:
2026-05-04
Description:
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 openssh-keycat-9.9p1-14.el10_1.alma.1.aarch64.rpm 44a482f0a1dcf68f17b88a6aaa19af17d3aabd19c5fe7553ea7d98b3d1b97f65
aarch64 openssh-server-9.9p1-14.el10_1.alma.1.aarch64.rpm 79a3ce52f5d560b73d730300f3cf71e8c348a778645f79c32f8f1ed5413e1aba
aarch64 openssh-keysign-9.9p1-14.el10_1.alma.1.aarch64.rpm b55feec498e42cf40109fcf88bc03f0d6522afbfdf8280119176e6d2139e1171
aarch64 openssh-clients-9.9p1-14.el10_1.alma.1.aarch64.rpm ba628393dffd749bbc0bb0e37e4f8d5f0dfad0e3d5e6f23dad2356e2bfa023d8
aarch64 openssh-9.9p1-14.el10_1.alma.1.aarch64.rpm c1cd9f1ac0e702b703754f33c2b9430c8253caef10671196fb4eacad205adf8d
aarch64 openssh-askpass-9.9p1-14.el10_1.alma.1.aarch64.rpm ed17f5d3c4c94a28cba91f6e39ed3a45639d2c4998359700acef0eee2663831e
ppc64le openssh-9.9p1-14.el10_1.alma.1.ppc64le.rpm 59eb416da0cff7788c933cdb53d102c38291c882037b470c71cfee58098324ef
ppc64le openssh-server-9.9p1-14.el10_1.alma.1.ppc64le.rpm a28b35f1154cae2a8118b823f95f8d1b85969d9bbf721db86c18a133aafa0fd6
ppc64le openssh-keycat-9.9p1-14.el10_1.alma.1.ppc64le.rpm b404f34c6c97e9ea93d5eab6ab4154f3752144620bfe4d08881c2801bb4833d2
ppc64le openssh-askpass-9.9p1-14.el10_1.alma.1.ppc64le.rpm daf874c0560e13b89f0a6d7808e83a50bdb75f726a16a1945f2fc4e82a4f1fc4
ppc64le openssh-clients-9.9p1-14.el10_1.alma.1.ppc64le.rpm df46bbce9bb68467e7c820b7dfb1223f6113362dbac983c380354ee9c5f62b24
ppc64le openssh-keysign-9.9p1-14.el10_1.alma.1.ppc64le.rpm f02efb7dbb8d67e67a4df7591cf46ac0604da82c6346225ee705729c85087909
s390x openssh-clients-9.9p1-14.el10_1.alma.1.s390x.rpm 3f0dbbc51df2104785b7b7d9969974ca0a7a4744171e53e5c677f82186c398ff
s390x openssh-keycat-9.9p1-14.el10_1.alma.1.s390x.rpm 8869a2d81e3a1e2f60494d509e5b70d676f711f1bb24cd315335f6cd0dfaf9bc
s390x openssh-9.9p1-14.el10_1.alma.1.s390x.rpm 8a05ec53f8165ca99eb5eded60446f4222293baff7cded6318d2beb1f06e6485
s390x openssh-keysign-9.9p1-14.el10_1.alma.1.s390x.rpm ccec642cb623fb444d544b2dcb847ede3a62205d77e375443e858e17e72e1c4e
s390x openssh-askpass-9.9p1-14.el10_1.alma.1.s390x.rpm cf87101bf29f24f1e7e7dd70931a91f06f88f44a4c11883c2bc550da62467a5f
s390x openssh-server-9.9p1-14.el10_1.alma.1.s390x.rpm ebde63b4cf245ae7c8dc7b70a3a74f0df1b9b9fc7334e740be3a3cffc9425f48
x86_64 openssh-askpass-9.9p1-14.el10_1.alma.1.x86_64.rpm 22ffc29a2fe82308a223b86c4214a1d98951c7a6f575da8d43bfbfe19539242c
x86_64 openssh-server-9.9p1-14.el10_1.alma.1.x86_64.rpm 3d892a6a69d18a96c7acee44301db8f5e8bc7ee076fcffccd4003e7eef48f8a8
x86_64 openssh-keycat-9.9p1-14.el10_1.alma.1.x86_64.rpm 4213d3b024c48d164364dd71e6064014fa483f74ad401ee4249a307393eae602
x86_64 openssh-clients-9.9p1-14.el10_1.alma.1.x86_64.rpm 4a71b578f0a69428d7f899a7a9cdceb4fdbefb5c6136366661af66d30dbeb81b
x86_64 openssh-keysign-9.9p1-14.el10_1.alma.1.x86_64.rpm 6e1c77b4b99c345f0d3e6c84658bff548f6a54f7f4e54a58e5f7beed9cde66ff
x86_64 openssh-9.9p1-14.el10_1.alma.1.x86_64.rpm de97298db9b515108ef02cbc7c12b2770c686022b292fc2a73d06516e5268a0e
x86_64_v2 openssh-askpass-9.9p1-14.el10_1.alma.1.x86_64_v2.rpm 2957f46b2070369d623b31d3528495a2400cf397e5849531aecb1843a05f9e0c
x86_64_v2 openssh-9.9p1-14.el10_1.alma.1.x86_64_v2.rpm d5d1bc351f2af902c6bcb23882b13a724ea52b0340ff7427f792e0a8344f313c
x86_64_v2 openssh-server-9.9p1-14.el10_1.alma.1.x86_64_v2.rpm de542e4a24410a2ff9c4ec630e768793af67e379aa562d4be42a74bfc2512cf7
x86_64_v2 openssh-keysign-9.9p1-14.el10_1.alma.1.x86_64_v2.rpm efacd67a5d3e7469f806fea1d276a31bf0347e4fdb87f3f81abd984e655057e9
x86_64_v2 openssh-keycat-9.9p1-14.el10_1.alma.1.x86_64_v2.rpm fbf6aa1220bad8f7b0b168321adda6a55636a293076840c96549f212fd7f15b4
x86_64_v2 openssh-clients-9.9p1-14.el10_1.alma.1.x86_64_v2.rpm ff67404a9c395cb5a2459f865bc12e9438995de208a4efd631a84217bb6d3516
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.