[ALSA-2026:88211] Moderate: openssh security update
Type:
security
Severity:
moderate
Release date:
2026-10-22
Description:
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997) * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (CVE-2026-59998) * openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay (CVE-2026-60001) * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 openssh-cavs-8.0p1-34.el8_10.aarch64.rpm 20f1f21d7e63c49ce40f613d3f45649b2747301061b8968da058c3c06e724c44
aarch64 openssh-8.0p1-34.el8_10.aarch64.rpm 5e904762ea124318238027dfb897da447534c49dd90bffbfacd239fd97b49bb8
aarch64 openssh-clients-8.0p1-34.el8_10.aarch64.rpm a08a5cfa29111307391c652a5a45de52c7c637d019315c8f729ee8cd3e108d95
aarch64 openssh-server-8.0p1-34.el8_10.aarch64.rpm a4a3f609a405a29c5c836edbef80dc69b17850339bb8c259f0addf92d9f65326
aarch64 openssh-ldap-8.0p1-34.el8_10.aarch64.rpm b0191633dbc3b89cc732515ec3903011aa5c9d2a62f50b87a7892197b5c2545f
aarch64 pam_ssh_agent_auth-0.10.3-8.34.el8_10.aarch64.rpm bb09ec1142aecb4e5ac7e95be60216ca21e81563dee6f5a3192fef399e3e8065
aarch64 openssh-askpass-8.0p1-34.el8_10.aarch64.rpm ee78c9b17be57cc496812ae3ad51a24134f2382b151b46add4dfcec6ce585b8e
aarch64 openssh-keycat-8.0p1-34.el8_10.aarch64.rpm ef5a761d55b57e7161139d9e3ffe6a2ecbca1624e10a967a11b3d557ace1c279
ppc64le openssh-cavs-8.0p1-34.el8_10.ppc64le.rpm 4963c2ccd9935a301a0d111d94e56db3d88b29d2047d3a7d714a3dc920f242ae
ppc64le openssh-ldap-8.0p1-34.el8_10.ppc64le.rpm 5568f89a8ddbd7020553d09313c4f234aa47ed73cd4828d2ca16ae291e6ed1e3
ppc64le openssh-askpass-8.0p1-34.el8_10.ppc64le.rpm 65039fc2cc27c7b8b3ea5df59f301193f64ee55ceae0f6a33b633836328c35a2
ppc64le openssh-server-8.0p1-34.el8_10.ppc64le.rpm 8460971e7edb61c16ad05f97a47ef06609e0b0e8c9c7d193d90eb4f7c30b0620
ppc64le pam_ssh_agent_auth-0.10.3-8.34.el8_10.ppc64le.rpm b2fa9aed10435683fe67cdb07d03d24a237f6343a6cf656ce851ab8335886c10
ppc64le openssh-clients-8.0p1-34.el8_10.ppc64le.rpm b5097c231eabfb0f240604818355dfec5afec2af43361cceabe2bfdade521766
ppc64le openssh-8.0p1-34.el8_10.ppc64le.rpm e19b334cccbf8b15a0176b382981f4162139f3437f945bd1d4b32d0e2b8bdaf7
ppc64le openssh-keycat-8.0p1-34.el8_10.ppc64le.rpm f5e1a5020a0a1f8c4ada9b0ca08a4efa009a65ebe9c012e8f1216ee6dc4b8786
s390x openssh-8.0p1-34.el8_10.s390x.rpm 067b4e029b3e667da9116a7d767bda7c6c981daa0a26d20d58b59ed6a67d1700
s390x openssh-server-8.0p1-34.el8_10.s390x.rpm 1abebcdabc67a0f04a6f2705e203ca2dca0d226e88ea02b8ddc13a8e632887e2
s390x openssh-clients-8.0p1-34.el8_10.s390x.rpm 2c89c69114e50db1c08e768ab1105f7633828939c05d33798ec6f099b9b11e71
s390x openssh-askpass-8.0p1-34.el8_10.s390x.rpm 399d4d980d820c5507a65b6f2cea673049fdf521f52bd70bbc70684cd3e93209
s390x openssh-ldap-8.0p1-34.el8_10.s390x.rpm 3f90095dd3bd9e8fe44516fb11c93368f9eb8b4081d6229dc1ddfca8880d2d15
s390x openssh-keycat-8.0p1-34.el8_10.s390x.rpm 509e8fe70b0065d8666215e8121f7364fd5fe881e236680e48766c7680b1b57a
s390x openssh-cavs-8.0p1-34.el8_10.s390x.rpm 5752738ebb900e9b86ff8e7a05c0575aa95a1c78792c495447de801697016de7
s390x pam_ssh_agent_auth-0.10.3-8.34.el8_10.s390x.rpm a544b9d6b125eea2ec2e15a8cc89da9e9c3ab114ecf640f91dcd1c2d99efae14
x86_64 openssh-clients-8.0p1-34.el8_10.x86_64.rpm 2e6e7235782c95dcdc74df2d14d323066697f6d0df334ff5c1fa195abc4e6d69
x86_64 openssh-8.0p1-34.el8_10.x86_64.rpm 47c357b084e4e25d8fa73b44e81f81cddf0e586ef49b4d61d88f6dad4b81a75f
x86_64 openssh-keycat-8.0p1-34.el8_10.x86_64.rpm 543d6d56c74259db589c3f57e82e297c0f78c1c5c9e4060bdb92e16c42174958
x86_64 openssh-ldap-8.0p1-34.el8_10.x86_64.rpm 56b8bcf208981a778c5a072326f4aa20a6ffe18c4aa8a3a26ddb8042d2ef7e86
x86_64 openssh-cavs-8.0p1-34.el8_10.x86_64.rpm 7c3641c88427cb5c968030f9d2c9194e959389bafcba7752ba7644569bef8e4b
x86_64 openssh-server-8.0p1-34.el8_10.x86_64.rpm bec02788d6f676f1d48952bb3614d3d6f1be1d76da2571c2480eb1ab11e643a1
x86_64 openssh-askpass-8.0p1-34.el8_10.x86_64.rpm e767b6d4924e8b50d82da3cf9e67a69921bd86f25c6f50ccb70390197915d929
x86_64 pam_ssh_agent_auth-0.10.3-8.34.el8_10.x86_64.rpm f247f84ba3d69bf359df03979e90f4e45ce6721c745c70454bc7ee69b72b9ed4
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.