[ALSA-2026:69266] Important: openssh security, bug fix, and enhancement update
Type:
security
Severity:
important
Release date:
2026-09-21
Description:
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282) Bug Fix(es) and Enhancement(s): * Incomplete backport of CVE-2023-38408 in AlmaLinux 8 openssh (JIRA:AlmaLinux-234763) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 openssh-clients-8.0p1-33.el8_10.aarch64.rpm 06eda3764b59ea9ca9b02bc0712494ce2569cd09ca88d5d0a06451747a220888
aarch64 openssh-keycat-8.0p1-33.el8_10.aarch64.rpm 1669bf5be1ce259aca04b3f8ef211936ee458457e3db4ee9cc3761af57664650
aarch64 pam_ssh_agent_auth-0.10.3-8.33.el8_10.aarch64.rpm 4413e37e0ebb1a7f5b4163aac36a34a68b7095214a9b1143673e82490ffaa4d5
aarch64 openssh-server-8.0p1-33.el8_10.aarch64.rpm 6cef4d31da6a0bede0f06ebcac5ab02cb06b0375a7d49e3118c3953f1151e893
aarch64 openssh-8.0p1-33.el8_10.aarch64.rpm 962038b45351ca41198839963e03c1288cd013a4af4245a9e6e182ee9df16b92
aarch64 openssh-ldap-8.0p1-33.el8_10.aarch64.rpm db8a841110b2e20faa332599dc2a5aba834e1642bc00edc748265414fb871ccd
aarch64 openssh-askpass-8.0p1-33.el8_10.aarch64.rpm eba112f00c28fbaeff19c1b3d79e0a2361e351a80bf33ec7716df776988ad879
aarch64 openssh-cavs-8.0p1-33.el8_10.aarch64.rpm eec406a8d17711aac7448c364295fea19d75783c246ec43404219d6cfc2993c4
ppc64le openssh-ldap-8.0p1-33.el8_10.ppc64le.rpm 6dc3ea70378752aa28a101c44b6c9cfe59967d9a42b831533cc8d81a6e27295d
ppc64le openssh-server-8.0p1-33.el8_10.ppc64le.rpm 6f0c1129db8855a91f4ef09ea925aa1357c5c353a7076bbc83cffe1e5b7fc2ce
ppc64le openssh-cavs-8.0p1-33.el8_10.ppc64le.rpm 8f7c5a9e2314ab90f96e30e0a685124f376a3629be7fc68242c9b9ba774968a2
ppc64le openssh-askpass-8.0p1-33.el8_10.ppc64le.rpm 9920a6fd06d41b6f6034f4d3588242ce8ab61e80284a05fc88b9a5a47c22fa12
ppc64le openssh-8.0p1-33.el8_10.ppc64le.rpm a5fe576e140db39497a2db05497c09bcc62fd510b6efacf207ef7cf765aa7013
ppc64le openssh-keycat-8.0p1-33.el8_10.ppc64le.rpm b02cf61a566b143e1715d4718c2cafa65a69f2608766b38db40eb095967a343d
ppc64le pam_ssh_agent_auth-0.10.3-8.33.el8_10.ppc64le.rpm dbdc157ab989e25c0a042251e8b9ba7ab14b687fed2b85bda2258b0cc52747d3
ppc64le openssh-clients-8.0p1-33.el8_10.ppc64le.rpm fb505a26e264024069d211c3f3c3b71d2bd5e39f45fb06e6d7f7b1f4a19b5c7c
s390x openssh-clients-8.0p1-33.el8_10.s390x.rpm 0077292f9ba9c100de0c4a38f9cf7526f1849e374e0bba6ec23a2ca597c081c3
s390x openssh-ldap-8.0p1-33.el8_10.s390x.rpm 601a5d1c0b28a1c7aef635339c8689b09ef382443de29cac09ee5f3da975d1e2
s390x openssh-server-8.0p1-33.el8_10.s390x.rpm 62be158d0c69ee528e20dd52d9bbc5ece02f4ec5c69164e2212c13880b10cda2
s390x openssh-8.0p1-33.el8_10.s390x.rpm 75bc2e164039c9a577e01c616b859958090bda915a00562685e40b782e391bfe
s390x openssh-askpass-8.0p1-33.el8_10.s390x.rpm 800daca40d12a2a366bb322dd22564557c6f7d057eb07af31207f7c487f9e56f
s390x openssh-cavs-8.0p1-33.el8_10.s390x.rpm cc01e80aee4808f91b4337c145659500965ada75f2a0e505e1d09881debee86c
s390x pam_ssh_agent_auth-0.10.3-8.33.el8_10.s390x.rpm dbb56fbba45dafa5832bca90b3ed6e2f2f59c77d9305115bd2fed4a6bd306698
s390x openssh-keycat-8.0p1-33.el8_10.s390x.rpm e65be35e8df46a6ac1bed19ebbea8b8086c1eafb4a7c995267d9fe240baad4a5
x86_64 openssh-keycat-8.0p1-33.el8_10.x86_64.rpm 26970097fce0a8125aabdb1739ec457072a10ba531aa5740dfc8af2014196744
x86_64 openssh-ldap-8.0p1-33.el8_10.x86_64.rpm a1bc5435fc2e3934471d4db0bcaedad5004aee8b1acf85900318c094ebed1f7a
x86_64 openssh-cavs-8.0p1-33.el8_10.x86_64.rpm a2b8537be0f0a5c0b873e51f392995d2c311fdaa5147dd8de08778480eb1c65e
x86_64 openssh-clients-8.0p1-33.el8_10.x86_64.rpm ac9b88d8d09b2d648710ea93b9f4a6189f363163ef2d3c5ac6386534f25a1db4
x86_64 openssh-server-8.0p1-33.el8_10.x86_64.rpm b21af69b8e6ba2b1cb9d551e092cbcd58a78bdea5f7babf79694a8d581393d0c
x86_64 pam_ssh_agent_auth-0.10.3-8.33.el8_10.x86_64.rpm c2d9794fc0789088c6c8bb18bccf89f4ee7c147f163d73254054bb627b48746b
x86_64 openssh-8.0p1-33.el8_10.x86_64.rpm c87fec3963cec4c91fcf2b3af38461eb610271e3c1ec7adb8f202da56f95ac7b
x86_64 openssh-askpass-8.0p1-33.el8_10.x86_64.rpm cc8bee24ef819436b6cbf1d5beb24a31708c9145e3b24aa017de1c8b16f1827a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.