Red Hat Product Errata RHBA-2026:97429 - Bug Fix Advisory
Issued:
2026-11-10
Updated:
2026-11-10

RHBA-2026:97429 - Bug Fix Advisory

Synopsis

openssh bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for openssh is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64

Fixes

  • RHEL-155161 - ssh should refuse connection when mlkem kex is specified in FIPS

CVEs

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
openssh-9.9p1-15.el9_9.src.rpm SHA-256: 4fd52679c4995985a480576e829610f33997ca71ae28602ac7d72da74edc9eeb
x86_64
openssh-9.9p1-15.el9_9.x86_64.rpm SHA-256: 73a8d7cb1069458f34b08b24ae069f2c197baa61cb787f6198b9459c37d269e1
openssh-askpass-9.9p1-15.el9_9.x86_64.rpm SHA-256: 4e674c5cce90e9c0f207d01f4c02281e82ea0bff044f186760caee5ad135b00e
openssh-askpass-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 308034659f03cb347e4bc5d767e556a8686c45266fd3fb79936cc8f891dc0eab
openssh-askpass-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 308034659f03cb347e4bc5d767e556a8686c45266fd3fb79936cc8f891dc0eab
openssh-clients-9.9p1-15.el9_9.x86_64.rpm SHA-256: 965d4c58f58ea32a5b4b89d5cc945b0c99e30d748b7a1078473c34d096075e33
openssh-clients-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 3082b5a6cfcfa616345e4f0eab4038eec59922bb3dc39a12d3aaa189adb60dc5
openssh-clients-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 3082b5a6cfcfa616345e4f0eab4038eec59922bb3dc39a12d3aaa189adb60dc5
openssh-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: a8c98ae52e9ae5ca27619965fd5d1fdee5226f8c71f380fff0ea6a42062f06f0
openssh-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: a8c98ae52e9ae5ca27619965fd5d1fdee5226f8c71f380fff0ea6a42062f06f0
openssh-debugsource-9.9p1-15.el9_9.x86_64.rpm SHA-256: eca490dcbe8ec4c5d763fa7563062deb3eda8c9e78ab33d7b2778f98c8e6cba3
openssh-debugsource-9.9p1-15.el9_9.x86_64.rpm SHA-256: eca490dcbe8ec4c5d763fa7563062deb3eda8c9e78ab33d7b2778f98c8e6cba3
openssh-keycat-9.9p1-15.el9_9.x86_64.rpm SHA-256: 36007bccff0a4cc3e778e43f9009fc5e5299338325a431330508aaff63edfa66
openssh-keycat-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 1f90ddc5d1ac5125cb3219576dbf1f93163452b620ef02c5dea983b16fa19c33
openssh-keycat-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 1f90ddc5d1ac5125cb3219576dbf1f93163452b620ef02c5dea983b16fa19c33
openssh-server-9.9p1-15.el9_9.x86_64.rpm SHA-256: 109a5266c959134014b587f1ae66f02e52551ce775fa8a812566cd0bb393964f
openssh-server-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: ffb7ce19e16094d0494d32b1532b367ec68ccfa50c626c3932239b51129b996c
openssh-server-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: ffb7ce19e16094d0494d32b1532b367ec68ccfa50c626c3932239b51129b996c
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 8a7382cd530d66d9b74c60bf8120b785b5d404f8625f8cdb3eb0a28571ee895e
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.x86_64.rpm SHA-256: 8a7382cd530d66d9b74c60bf8120b785b5d404f8625f8cdb3eb0a28571ee895e
pam_ssh_agent_auth-0.10.4-10.15.el9_9.x86_64.rpm SHA-256: 7c1722b36e5f257243432689cb2280022c4dc64f762e32bd5f121c39bea7bac2
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.x86_64.rpm SHA-256: 878ebb9f94cb631c02a483addcf8405f8112682483f54cdfa8097730fd0fb28c
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.x86_64.rpm SHA-256: 878ebb9f94cb631c02a483addcf8405f8112682483f54cdfa8097730fd0fb28c

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
openssh-9.9p1-15.el9_9.src.rpm SHA-256: 4fd52679c4995985a480576e829610f33997ca71ae28602ac7d72da74edc9eeb
s390x
openssh-9.9p1-15.el9_9.s390x.rpm SHA-256: 3ebe1adaedb9fb9f3bf56c492710c0977f57229e4f7b98b0916660c324ad6024
openssh-askpass-9.9p1-15.el9_9.s390x.rpm SHA-256: a454e0c1f74e7fe98fd39c2d6a20aacd078b7d6a280e1f8cd7868107d11e749e
openssh-askpass-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 1b2c582ed7c724481d6c4b1bef4f66a06f26f836738b42e3b5f5eadb3898d299
openssh-askpass-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 1b2c582ed7c724481d6c4b1bef4f66a06f26f836738b42e3b5f5eadb3898d299
openssh-clients-9.9p1-15.el9_9.s390x.rpm SHA-256: 3e2e45a29688b011c1c406f6e71966cbd0f14bd09972fda24a82b483f400375d
openssh-clients-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: f10aca86b4c4cfea2951ca5f5af1c5b430b91cb5a0f5649338c2e4658733e583
openssh-clients-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: f10aca86b4c4cfea2951ca5f5af1c5b430b91cb5a0f5649338c2e4658733e583
openssh-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 7e9c80141357ad2b2fca33823d0258c64ce4209f0366048a992193a2f7f85640
openssh-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 7e9c80141357ad2b2fca33823d0258c64ce4209f0366048a992193a2f7f85640
openssh-debugsource-9.9p1-15.el9_9.s390x.rpm SHA-256: e078438c3b4fca98875ace37a83b183a53acc1dda29d833b89f7d62de4555909
openssh-debugsource-9.9p1-15.el9_9.s390x.rpm SHA-256: e078438c3b4fca98875ace37a83b183a53acc1dda29d833b89f7d62de4555909
openssh-keycat-9.9p1-15.el9_9.s390x.rpm SHA-256: 687ab877317608a17ae43a71d030315cc4843d4311fa3f8032d0b9a220bfa889
openssh-keycat-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 402d25e976311f80a419ac5afbbc505939757e1e5ee039af7ff5008b51f94151
openssh-keycat-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 402d25e976311f80a419ac5afbbc505939757e1e5ee039af7ff5008b51f94151
openssh-server-9.9p1-15.el9_9.s390x.rpm SHA-256: 1a3760538bce4a1a0af00f07b826f68437ea28c10b24d1c4d1f98d928318e3cd
openssh-server-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: cd3f32c3df5bf0f7031ab2305716526a9831284c6c423b840ea817d3bacd342b
openssh-server-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: cd3f32c3df5bf0f7031ab2305716526a9831284c6c423b840ea817d3bacd342b
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 33519b83ac2d67b0f55d1e010719db16fec8aae20e5fca04c13dcd890f690566
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.s390x.rpm SHA-256: 33519b83ac2d67b0f55d1e010719db16fec8aae20e5fca04c13dcd890f690566
pam_ssh_agent_auth-0.10.4-10.15.el9_9.s390x.rpm SHA-256: f8483c298dd219af3aafd6362c48cb4bb442c27cf8e424adc426e796aa4dba51
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.s390x.rpm SHA-256: 5057109d864b1752d895f0ad15ea455445ea2e11c094dbf3f97876d4f3c42356
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.s390x.rpm SHA-256: 5057109d864b1752d895f0ad15ea455445ea2e11c094dbf3f97876d4f3c42356

Red Hat Enterprise Linux for Power, little endian 9

SRPM
openssh-9.9p1-15.el9_9.src.rpm SHA-256: 4fd52679c4995985a480576e829610f33997ca71ae28602ac7d72da74edc9eeb
ppc64le
openssh-9.9p1-15.el9_9.ppc64le.rpm SHA-256: cb2540a7061dc71bfbf56e963f0d7da10f8934fff1e13f26acebc2796b3e5f61
openssh-askpass-9.9p1-15.el9_9.ppc64le.rpm SHA-256: cd3f3451410b161e41cd50eab87abff5a8d82efa544d684da567fbac14983290
openssh-askpass-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 9bd0c7c93082036fa28a77c47e4bbca874fe1304f5d95357c4e531dabb6ca940
openssh-askpass-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 9bd0c7c93082036fa28a77c47e4bbca874fe1304f5d95357c4e531dabb6ca940
openssh-clients-9.9p1-15.el9_9.ppc64le.rpm SHA-256: cf71055cd66ff44236711ba23646152262fc527dcc4745fc604388123aa5bc13
openssh-clients-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: c9c664c0ad11e8a8c227e5a640ed1650c7920a88e5c660753e95fd92476d74d7
openssh-clients-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: c9c664c0ad11e8a8c227e5a640ed1650c7920a88e5c660753e95fd92476d74d7
openssh-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 5339effeceb9c951714b00a6bb05043a3f682d10c6cf8f7451d4c2773f533f60
openssh-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 5339effeceb9c951714b00a6bb05043a3f682d10c6cf8f7451d4c2773f533f60
openssh-debugsource-9.9p1-15.el9_9.ppc64le.rpm SHA-256: d716198eb81d2e9bc958ffeb2fb6023364bb6919172e4c48ad8380037280e0cb
openssh-debugsource-9.9p1-15.el9_9.ppc64le.rpm SHA-256: d716198eb81d2e9bc958ffeb2fb6023364bb6919172e4c48ad8380037280e0cb
openssh-keycat-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 8e9e6e5d5af40f66e79473c33dd90c6fe8c44bbfc2806e27341553fe39c6c89b
openssh-keycat-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 3d5607754716c8ddebebcfbe0e2b563d146326bf02b347cb81836a1f015362e9
openssh-keycat-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 3d5607754716c8ddebebcfbe0e2b563d146326bf02b347cb81836a1f015362e9
openssh-server-9.9p1-15.el9_9.ppc64le.rpm SHA-256: 37e2f31cc864741e59c678d2edf98ac895b8897b11b63beafbb9b98efbb1444a
openssh-server-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: ec2aee77a09b18c03b20b9d425f0592562dd98b11d02a939a49480841dfa03e1
openssh-server-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: ec2aee77a09b18c03b20b9d425f0592562dd98b11d02a939a49480841dfa03e1
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: edbbcc419478af3938627f41e984f823f99bb01fc4c799eac3f5c6dda3555330
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.ppc64le.rpm SHA-256: edbbcc419478af3938627f41e984f823f99bb01fc4c799eac3f5c6dda3555330
pam_ssh_agent_auth-0.10.4-10.15.el9_9.ppc64le.rpm SHA-256: 978a90c2e9897b77c041a8b7a9af7d3498efe0daa317aed02d753ffa2f159c42
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.ppc64le.rpm SHA-256: 6951324c3c36f81bc0f3b44921039a74b8948296724c16c10ee0e556b461622e
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.ppc64le.rpm SHA-256: 6951324c3c36f81bc0f3b44921039a74b8948296724c16c10ee0e556b461622e

Red Hat Enterprise Linux for ARM 64 9

SRPM
openssh-9.9p1-15.el9_9.src.rpm SHA-256: 4fd52679c4995985a480576e829610f33997ca71ae28602ac7d72da74edc9eeb
aarch64
openssh-9.9p1-15.el9_9.aarch64.rpm SHA-256: fd1612bdee77d1a4ee1817fd57945c3e7ff79bfb8793821bc4699216c64115fd
openssh-askpass-9.9p1-15.el9_9.aarch64.rpm SHA-256: dd79cdc09debf2e0340cfc706f0c3eb9cfd385d981ad44cd3fb83b9f209ed88a
openssh-askpass-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: ff20befc0294a2a9886851a598518506cbd69a4dde5d519c07874544eb1d3b34
openssh-askpass-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: ff20befc0294a2a9886851a598518506cbd69a4dde5d519c07874544eb1d3b34
openssh-clients-9.9p1-15.el9_9.aarch64.rpm SHA-256: 9104c6d0a7cf533c867a360792e92c04c02d835c28b53c16a603778a340b6f9c
openssh-clients-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: 5bd2b2662cc013a7b8b3ffb7b259d09b5a570c596def7ecc67428311e457a844
openssh-clients-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: 5bd2b2662cc013a7b8b3ffb7b259d09b5a570c596def7ecc67428311e457a844
openssh-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: e16929b1ec4e9a329515670519c5cffc8766bc3503938f7c683ae773e4e8fcb9
openssh-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: e16929b1ec4e9a329515670519c5cffc8766bc3503938f7c683ae773e4e8fcb9
openssh-debugsource-9.9p1-15.el9_9.aarch64.rpm SHA-256: cc2ac1bc30f782603605dbb48b7e936495a694d074db87a22fdfe8e8e2ed61fc
openssh-debugsource-9.9p1-15.el9_9.aarch64.rpm SHA-256: cc2ac1bc30f782603605dbb48b7e936495a694d074db87a22fdfe8e8e2ed61fc
openssh-keycat-9.9p1-15.el9_9.aarch64.rpm SHA-256: bd2adc046afddfc491f2cd8f647061279cb4cd493f32fe5ba4f1a1fe719baf11
openssh-keycat-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: fe7140c4dc42e28dc570dfa6c1ac792fc5baa2e7341106916728c2906a284080
openssh-keycat-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: fe7140c4dc42e28dc570dfa6c1ac792fc5baa2e7341106916728c2906a284080
openssh-server-9.9p1-15.el9_9.aarch64.rpm SHA-256: 51f27d813fb5ce2236dde455ff2b144aa081d20e9129ecc2dd8fee9023e30d81
openssh-server-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: 38fc9d3c03cb7bededf3189434725f317a0b47f93946aa527c80fc5bc473afd9
openssh-server-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: 38fc9d3c03cb7bededf3189434725f317a0b47f93946aa527c80fc5bc473afd9
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: c0fe214d8ef43401d2cb9a444cb460f0238843040f9ed4a92141527c0f1c9800
openssh-sk-dummy-debuginfo-9.9p1-15.el9_9.aarch64.rpm SHA-256: c0fe214d8ef43401d2cb9a444cb460f0238843040f9ed4a92141527c0f1c9800
pam_ssh_agent_auth-0.10.4-10.15.el9_9.aarch64.rpm SHA-256: d54548cd7de279a483314865c4f3eb5fd4f73f1347e2cd97afd3d9ccad706a5d
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.aarch64.rpm SHA-256: 99c48f1367f16425e7bdfd9bdb23c75b7f2a8b5c9fce06269e3d168207b7e15d
pam_ssh_agent_auth-debuginfo-0.10.4-10.15.el9_9.aarch64.rpm SHA-256: 99c48f1367f16425e7bdfd9bdb23c75b7f2a8b5c9fce06269e3d168207b7e15d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.