[ALSA-2026:69129] Important: openssh security update
Type:
security
Severity:
important
Release date:
2026-09-22
Description:
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 openssh-9.9p1-27.el10_2.alma.1.aarch64.rpm 0cc2eca29d838bb745068e618a1e48d8aae141c53e38de8f56c13d57925c4c8a
aarch64 openssh-server-9.9p1-27.el10_2.alma.1.aarch64.rpm 6267f44392a88a459068fdcc17122222a54bca19da1651faf473359a9d044451
aarch64 openssh-keycat-9.9p1-27.el10_2.alma.1.aarch64.rpm 69946e7e00753866c8ce8ed43e0efc827e8969b7a5c94d4cc5aec16f1537d309
aarch64 openssh-askpass-9.9p1-27.el10_2.alma.1.aarch64.rpm 83b28f277e5090951c441d17c85f266b8bb0954ceaafb7f67205442f0c4da152
aarch64 openssh-keysign-9.9p1-27.el10_2.alma.1.aarch64.rpm 9148e67468a2fb1bb7bfd66b12c41986625625554ef634831a55f940bcd75dec
aarch64 openssh-clients-9.9p1-27.el10_2.alma.1.aarch64.rpm da3c7023df26a39113107f8209dad7ab1ea089b92423e3a28e036c2e325d80cd
ppc64le openssh-askpass-9.9p1-27.el10_2.alma.1.ppc64le.rpm 0328cf3a0c80f5e32a6bc4faeb20061a0b2cf872ec726a347f254f1f1997923a
ppc64le openssh-clients-9.9p1-27.el10_2.alma.1.ppc64le.rpm 204b6fb06021485cbeeeade0a7f6149158e17e45f5a24339c0ad798a7aee3696
ppc64le openssh-server-9.9p1-27.el10_2.alma.1.ppc64le.rpm 528c91d6d57498f2e3950c77ecb90912124c4d6b506e43c9b2b787cc07e6dc7d
ppc64le openssh-keysign-9.9p1-27.el10_2.alma.1.ppc64le.rpm 5a63324c0d22b79976f28ac712c0328001248a5e2a93b933f9e0ef24eb216538
ppc64le openssh-9.9p1-27.el10_2.alma.1.ppc64le.rpm 7258b9d0e752e6c9773abfda7442e8fd0842fc2d69f5dbe183f17141c6c5b4eb
ppc64le openssh-keycat-9.9p1-27.el10_2.alma.1.ppc64le.rpm 73c459da1b66a803076a0f32b804a5c1f8d1d55cbf5bea6237ebf1c41c390125
s390x openssh-9.9p1-27.el10_2.alma.1.s390x.rpm 16cdbceb3d47d83c546ef91dc32abcb5cb30ed8f118caafecabc3217f12da31c
s390x openssh-keycat-9.9p1-27.el10_2.alma.1.s390x.rpm 264bff279ae3203e199865f9bd9a00dfdc3e32ed94eeb9b573721df79d99fe15
s390x openssh-askpass-9.9p1-27.el10_2.alma.1.s390x.rpm 4795cc4823602e621c3c37be72c5b6b943db0cd30e82a55847e8860e5d583d6c
s390x openssh-clients-9.9p1-27.el10_2.alma.1.s390x.rpm 7df1f0a5538c6291d7f25a3c36a66ba9586e6e69aa2a36733c3a2622e26738b2
s390x openssh-server-9.9p1-27.el10_2.alma.1.s390x.rpm dabe2da7200d377167ad1a38f68354638badcf826cd86535a505ea8695f558ca
s390x openssh-keysign-9.9p1-27.el10_2.alma.1.s390x.rpm f6fd2cf9afb183d016d52891b802ea92f9937174994eafab5e282c210b89fef2
x86_64 openssh-askpass-9.9p1-27.el10_2.alma.1.x86_64.rpm 3784c463548420f41ec3ad67a0d6d18c42c07c1e4c3ada27c9fde04f19ccf7ad
x86_64 openssh-keycat-9.9p1-27.el10_2.alma.1.x86_64.rpm 517d47ffac556c8374ec28184753b7f109047455de67a0332c25ee221b3fe163
x86_64 openssh-keysign-9.9p1-27.el10_2.alma.1.x86_64.rpm 89d38736e3ff574d15887e47b2e7c416f22b4c60862069cd599b027125f731b0
x86_64 openssh-9.9p1-27.el10_2.alma.1.x86_64.rpm 9b357adad390734640f9fb56a3b63b0f1cf7e6607983319cc32996230a8b0ecb
x86_64 openssh-server-9.9p1-27.el10_2.alma.1.x86_64.rpm ab88d98a100587fea9b2920234065a278cb9aae845d0a00c7b466e9f75c5a295
x86_64 openssh-clients-9.9p1-27.el10_2.alma.1.x86_64.rpm df49c3873662966b0e50e14524141495127f66306bf2c05d0c4ee7d49e4d786f
x86_64_v2 openssh-keycat-9.9p1-27.el10_2.alma.1.x86_64_v2.rpm 3deaaac98a1333a4158fb91ec1e782f3d8b8ca30e44e96833f4fdd5b63d0f903
x86_64_v2 openssh-clients-9.9p1-27.el10_2.alma.1.x86_64_v2.rpm 5b46607c75a95d421635ad23005314ca42e1e85903538139859a9e6f631ef618
x86_64_v2 openssh-askpass-9.9p1-27.el10_2.alma.1.x86_64_v2.rpm 696ae7a3c5bfddeea8c42aa82b9031583354fea9d0b55626e5d2eec35d2a89d8
x86_64_v2 openssh-server-9.9p1-27.el10_2.alma.1.x86_64_v2.rpm 94b7462f347c9580fb97630272aefd5cc11937e559be4258d899e75be82ccc7b
x86_64_v2 openssh-keysign-9.9p1-27.el10_2.alma.1.x86_64_v2.rpm 97060a5bfa4009da3d8b3d4efdb8e84c01c409d2517cec6a63d684eb8b38ee29
x86_64_v2 openssh-9.9p1-27.el10_2.alma.1.x86_64_v2.rpm 99f67caed31be42c46550298428dfeab2aeb4cd30639aef4582d0ec4b21326e1
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.