[ALSA-2026:85958] Moderate: openssh security update
Type:
security
Severity:
moderate
Release date:
2026-10-21
Description:
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997) * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (CVE-2026-59998) * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 openssh-askpass-9.9p1-13.el9_8.alma.1.aarch64.rpm 31ec1832a8f9d6da6c0f8d2be3bc7eca6340718400426b6896f3810c83e28bae
aarch64 openssh-9.9p1-13.el9_8.alma.1.aarch64.rpm 48204bd706843a5f67f8240dfa1c77440df65b922ae6c8821af541aefbbde8dc
aarch64 openssh-keycat-9.9p1-13.el9_8.alma.1.aarch64.rpm 571c3a1af4ca0ec080f73244408c8cc41449c491b8023609f9b5830b22d73981
aarch64 pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.aarch64.rpm 97b27b1c5d2c75fc5588ab13d92f26fe5a44ffb86f37b016d62616f72fd6b416
aarch64 openssh-server-9.9p1-13.el9_8.alma.1.aarch64.rpm d0b946bf92fe46c277f578b8fee7aaeb331487b34acf85ca3e7109bbbeaa1169
aarch64 openssh-clients-9.9p1-13.el9_8.alma.1.aarch64.rpm d893b52fb876c3b581312473fd4aa249973e6ab149623d34f224591e4c8ba2ed
ppc64le pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.ppc64le.rpm 0fe4fa92942d59d24f3e61b47e08559866b95b157ba06894af585f89a6be8c7f
ppc64le openssh-clients-9.9p1-13.el9_8.alma.1.ppc64le.rpm 4b0998ded25159b9edf08dfe3a5cd9f5efe10e7b3524cc764c56b9672fca5c78
ppc64le openssh-server-9.9p1-13.el9_8.alma.1.ppc64le.rpm 4d29f8c01d9edbe4e71ba93593b3d6b5d0a737b9b7e2e6505421d09524485285
ppc64le openssh-askpass-9.9p1-13.el9_8.alma.1.ppc64le.rpm d7f4e79b2e02a80c90dd0df732ed548a60c980da9a389c840e8a70bb87f60b95
ppc64le openssh-9.9p1-13.el9_8.alma.1.ppc64le.rpm e0c540804edaa95f49bc658249108365ede0e016989237edc6b9558395514101
ppc64le openssh-keycat-9.9p1-13.el9_8.alma.1.ppc64le.rpm f17126d3e4d1c0e69fa5545cc16d4459e18f3998df3d8f1eddd29db55478c2da
s390x openssh-keycat-9.9p1-13.el9_8.alma.1.s390x.rpm 103f6ecd33306b7f4f7404cfa9c83b0ac7e8452c2f1fde61b11b47269e74ea2d
s390x openssh-server-9.9p1-13.el9_8.alma.1.s390x.rpm 4008157b4e92de11f04054dafb0652bcd561bc6d1f663715af846cdec7178d4e
s390x pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.s390x.rpm 52afd320d6f512dd0bff50d5e2aa1df0c98c7fdcfab15771fe17b63e77f67f39
s390x openssh-askpass-9.9p1-13.el9_8.alma.1.s390x.rpm e45c777891b715cf396d95289a134b8e3caf301033503a5970913583f560f0c0
s390x openssh-9.9p1-13.el9_8.alma.1.s390x.rpm e5dfec8f4e5631068a6ea3dcf505d3dd07287f2be7ba5edd0c8ea622676e0adf
s390x openssh-clients-9.9p1-13.el9_8.alma.1.s390x.rpm ecc6143e18772df233f72ec632c94e6065ec01602a349f8ea1f5812179f60fd8
x86_64 openssh-keycat-9.9p1-13.el9_8.alma.1.x86_64.rpm 1afda8b9926a4448e0c670f03ad9e5773e185e4cd19a41850411e28be7eb7b30
x86_64 openssh-server-9.9p1-13.el9_8.alma.1.x86_64.rpm 4fb5e2987d49b4eda7c06f14a571767389341d13b1a27e19fb961d9edd4920dc
x86_64 openssh-9.9p1-13.el9_8.alma.1.x86_64.rpm 71d18d7d1840597f405828fc5ea6d398aabd8f13b4fa53067821bcf675249647
x86_64 openssh-clients-9.9p1-13.el9_8.alma.1.x86_64.rpm 7db760ce17014d22f4a8ac3ea0a91842b48a01ae017aea2f0d4ec4deb9410f8a
x86_64 pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.x86_64.rpm b3f96e618338976fd60a2bd7749f473aa2691fa43ef6ba9a112264ecda1262ac
x86_64 openssh-askpass-9.9p1-13.el9_8.alma.1.x86_64.rpm b4c5786be2374391e10add8c19aec84a8649e54c09f97623fe545940f23754ac
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.