| Name: | openssh |
|---|---|
| Version: | 9.9p1 |
| Release: | 25.0.1.el10_2 |
| Architecture: | aarch64 |
| Group: | Unspecified |
| Size: | 1444187 |
| License: | BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND sprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant |
| RPM: | openssh-9.9p1-25.0.1.el10_2.aarch64.rpm |
| Source RPM: | openssh-9.9p1-25.0.1.el10_2.src.rpm |
| Build Date: | Thu Jul 30 2026 |
| Build Host: | build-ol10-aarch64.oracle.com |
| Vendor: | Oracle America |
| URL: | http://www.openssh.com/portable.html |
| Summary: | An open source implementation of SSH protocol version 2 |
| Description: | SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. |
- Upstream references found with /usr/bin/ssh [Orabug: 37824421]
- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852
- CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206
- Version bump
- CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812
- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579
- Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929
- Adding a mechanism to disable GSSAPIDelegateCredentials in sshd_config Resolves: RHEL-5281
- CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128399 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128388