[ALSA-2026:47757] Important: openssh security update
Type:
security
Severity:
important
Release date:
2026-07-29
Description:
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655) * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653) * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654) * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002) * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 openssh-keysign-9.9p1-25.el10_2.alma.1.aarch64.rpm 31bf2e717431dd3e86dc449bb2e0cd693a25ae7b629e46a909bc9759a3075d7d
aarch64 openssh-clients-9.9p1-25.el10_2.alma.1.aarch64.rpm 3d5e7b4608da0e3275989c76b7ab0b37b4dcc35d49f0c58861f7d4e2eb61a7d3
aarch64 openssh-keycat-9.9p1-25.el10_2.alma.1.aarch64.rpm 5bd71eb066e961e4ec99ac5327dbe354be0da56e708471b94acc8ad57673354e
aarch64 openssh-9.9p1-25.el10_2.alma.1.aarch64.rpm 6c2633e058aa07216548d3433a8ad2f45ba830f3213c46e690d2949047457191
aarch64 openssh-askpass-9.9p1-25.el10_2.alma.1.aarch64.rpm a6081683aac0b5273f1653c52b2e726c5f14650989f121f78c67f70db305b884
aarch64 openssh-server-9.9p1-25.el10_2.alma.1.aarch64.rpm c034e505809db587adf9f562966b5136ee0926d03bcaa6b3440d1737c2c03e2e
ppc64le openssh-clients-9.9p1-25.el10_2.alma.1.ppc64le.rpm 002c055ca09f56ca4946bd25b0f9eceff7f97345ff3b557fbf73c5eca2da084e
ppc64le openssh-9.9p1-25.el10_2.alma.1.ppc64le.rpm 3c3f0d49d95c932f2c202bf9adb06223732f23b08f4730e4e6ff4f72f9f65c23
ppc64le openssh-server-9.9p1-25.el10_2.alma.1.ppc64le.rpm 67e4b2f8574752021c71ac20d897c761813fef22f9e2eccc6c1ca6e2c8be8568
ppc64le openssh-keycat-9.9p1-25.el10_2.alma.1.ppc64le.rpm 7b0acf0777cbc330239199606b9f5165616c229d8c18e8a3c7f33ddd80e142c7
ppc64le openssh-keysign-9.9p1-25.el10_2.alma.1.ppc64le.rpm b982b3e9dc94596583882d478b2eb4343353bc23532947b04b7087c38f18ea22
ppc64le openssh-askpass-9.9p1-25.el10_2.alma.1.ppc64le.rpm e4e12716bfaa0348d2ad6a151a81d2e24336c9fb4c4c8c68a41c2fe30f32a51d
s390x openssh-askpass-9.9p1-25.el10_2.alma.1.s390x.rpm 0a51eac47238ecd01951fd1ca1303fe8c7d4765dce65a0650a1f8089de36e9df
s390x openssh-keycat-9.9p1-25.el10_2.alma.1.s390x.rpm 424eb1511ac9afac8b5df174b922ef67fc71d8de9ae024226d7dba87674c08b3
s390x openssh-keysign-9.9p1-25.el10_2.alma.1.s390x.rpm 6f98e7f21b7c51e88a7c289f22157a6e7535254ba4dce88c0d013622dc46aba6
s390x openssh-server-9.9p1-25.el10_2.alma.1.s390x.rpm a154071dd3292dffcf06116e2f81fba1d418a8f5b34b0c36c2649fdb00769b5e
s390x openssh-9.9p1-25.el10_2.alma.1.s390x.rpm c4b3392be3738dad75c2209e810fd288ba334d0563a80b8ad649a4717a192d20
s390x openssh-clients-9.9p1-25.el10_2.alma.1.s390x.rpm e3b6d4f8b3b6c2b921a64bcd33178a2b0f8dfdf43c3918debd57ea93103368d4
x86_64 openssh-server-9.9p1-25.el10_2.alma.1.x86_64.rpm 1bd2e0bacb6e25d8e139ac55ed8b8660f75a6bd0cc41e1ad8f83ca517ccb9e2e
x86_64 openssh-askpass-9.9p1-25.el10_2.alma.1.x86_64.rpm 336ff98f6c201a89486b329c5ce6f465eaa8a058c352939c7db857e02881e063
x86_64 openssh-keycat-9.9p1-25.el10_2.alma.1.x86_64.rpm 63bdc943168bb967f8267276510ddb7599ee20acaebff235e639a63d340cc2f0
x86_64 openssh-9.9p1-25.el10_2.alma.1.x86_64.rpm 7cbf98361ad409c4d4b692b088a380f0033bc6045c2c2020e37c403c87db4ebd
x86_64 openssh-keysign-9.9p1-25.el10_2.alma.1.x86_64.rpm c83bdd726572a79dcfeff702c19c24f52fde806dc630aa5939bb3ff7f4370cc6
x86_64 openssh-clients-9.9p1-25.el10_2.alma.1.x86_64.rpm ed01d8598a2cee3a0bc91529386bce840f1c8e02d036f59116d69c7f8d176874
x86_64_v2 openssh-clients-9.9p1-25.el10_2.alma.1.x86_64_v2.rpm 393f2a14da524585fea54c6fe54a253de744abe49285988d3284e06064f45a94
x86_64_v2 openssh-keysign-9.9p1-25.el10_2.alma.1.x86_64_v2.rpm 6d706b9259ae0db0d677cc8b51e36a62085986cd943ea3e1ff7bc2db6bcc44ef
x86_64_v2 openssh-keycat-9.9p1-25.el10_2.alma.1.x86_64_v2.rpm 80659364176ed1c0b6e2ac7da1ecc7a89ecd517367f4d36ecabbd5ca01b70bc3
x86_64_v2 openssh-server-9.9p1-25.el10_2.alma.1.x86_64_v2.rpm 88e63a28c392981603cce77728612f40d8377dd7a45c9612e8bf67291d0901fa
x86_64_v2 openssh-askpass-9.9p1-25.el10_2.alma.1.x86_64_v2.rpm 8e34921643845426e71ed976c965814c406e0d409cf20e6b466ede72cf8574ba
x86_64_v2 openssh-9.9p1-25.el10_2.alma.1.x86_64_v2.rpm c721902ca86a8b14140c6417c95e485219074d244e0d11167f238de38a4273d3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.