ALSA-2026:69130

[ALSA-2026:69130] Important: openssh security update

Type:

security

Severity:

important

Release date:

2026-09-22

Description:

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  

Security Fix(es):  

  * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)
  * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)
  * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)
  * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)
  * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	openssh-keycat-9.9p1-11.el9_8.alma.1.aarch64.rpm	62b2caf7a74ba316d8e5d7b28bcb582dfffdd1b1c0afb9f36e754e03ab7e486d
aarch64	openssh-9.9p1-11.el9_8.alma.1.aarch64.rpm	6e6301e9db1850a1c3e3ad0874a32013ccc62f3e07825f2bcc3120b1a07e8137
aarch64	openssh-clients-9.9p1-11.el9_8.alma.1.aarch64.rpm	7639a9fd6a285a7e3d83801349d3bfeacaf17aee97e477be6e2b0abbc65fd269
aarch64	openssh-server-9.9p1-11.el9_8.alma.1.aarch64.rpm	7c01da49627985ce7d263852ecf5a7fc652adfe9085d6664a91f5cbe9cd43133
aarch64	openssh-askpass-9.9p1-11.el9_8.alma.1.aarch64.rpm	82672dde989339393cd44d3471bc07c8a36aa1fe7b4848e600d70f3843d5f857
aarch64	pam_ssh_agent_auth-0.10.4-8.11.el9_8.alma.1.aarch64.rpm	a4d4987a0ba0fa4f0f04c1aba5ba89aeaf3f4d640519d4fd2d037083180b89b8
ppc64le	openssh-askpass-9.9p1-11.el9_8.alma.1.ppc64le.rpm	3c2843915db48810dc56af2d75325e7d1543cf944ec77abd3df755675a5b2e37
ppc64le	pam_ssh_agent_auth-0.10.4-8.11.el9_8.alma.1.ppc64le.rpm	43fe64a0e5b16aebf564404ee5c4aa93e3a89d5caed3a521db836713962e5a32
ppc64le	openssh-keycat-9.9p1-11.el9_8.alma.1.ppc64le.rpm	8b9b4512c6acb473b3f1db7900c97586c75ad37cfeacd96a74f6a3e9be2900d7
ppc64le	openssh-clients-9.9p1-11.el9_8.alma.1.ppc64le.rpm	ae49e7c0077cc5f6e9d92e0f95535893f8ad030bdf119ad2eb1adff6c0f0e4ab
ppc64le	openssh-9.9p1-11.el9_8.alma.1.ppc64le.rpm	b856c4c49c232161332ff3a348fcb60cabf23287fd6b195f019d24801032719f
ppc64le	openssh-server-9.9p1-11.el9_8.alma.1.ppc64le.rpm	eaa63d63c8dd4f38e46f058d7978c67515deb8b982d388f876d1ae812e459673
s390x	openssh-keycat-9.9p1-11.el9_8.alma.1.s390x.rpm	2adbc829d406b69dbe3cead5cb08a1d25a04236cc7a7f02ef1f6352d3946d796
s390x	pam_ssh_agent_auth-0.10.4-8.11.el9_8.alma.1.s390x.rpm	47791db7a8c9ab297b2171183a6e59febb7843a8f62ef6d0e41da9738a8b4b1a
s390x	openssh-9.9p1-11.el9_8.alma.1.s390x.rpm	4d1a1f7b7bfecb689c1c33eab6bf84484f6e74d76e85e9a7af0bf1115a6b450b
s390x	openssh-server-9.9p1-11.el9_8.alma.1.s390x.rpm	596d15cd07e667a013910e36e11e9541bac1e463c4310c9921562a9ff04da792
s390x	openssh-clients-9.9p1-11.el9_8.alma.1.s390x.rpm	86bcba835660100e0e0b4ac98f362514b0707574c497890556d1dd4286266843
s390x	openssh-askpass-9.9p1-11.el9_8.alma.1.s390x.rpm	c992d1498d65a71c378b0cea3f6bee6c2027f63e10eadd062568922c6e045021
x86_64	openssh-9.9p1-11.el9_8.alma.1.x86_64.rpm	05873817678ed549432d2faff0db6ce4d8eb687ef7c0b05b1e9532b593bf9975
x86_64	openssh-clients-9.9p1-11.el9_8.alma.1.x86_64.rpm	4ec2fb26bbf3fd382c948ac1f0ea5a0c238806c7a9a9efd75243510f6655e9cf
x86_64	pam_ssh_agent_auth-0.10.4-8.11.el9_8.alma.1.x86_64.rpm	4f8051c88142ba8a9b5d57336bd48c6e5579348df6bd9d68a911db82f026a2f0
x86_64	openssh-askpass-9.9p1-11.el9_8.alma.1.x86_64.rpm	5165d940cc316162dfa3cc25ad5ffd474fccd91e91c9e4584564321db8ee1eca
x86_64	openssh-keycat-9.9p1-11.el9_8.alma.1.x86_64.rpm	c254e95ab5b2d9c206f8c1f57ada405aec80b8392a48bf7856c98ec411439466
x86_64	openssh-server-9.9p1-11.el9_8.alma.1.x86_64.rpm	fdd16eaeabae3742cfc4b0f91eb1eaf295404f7a62f0c28875092f38b49a4e04

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.