{ "document" : { "aggregate_severity" : { "namespace" : "https://access.redhat.com/security/updates/classification/", "text" : "Important" }, "category" : "csaf_security_advisory", "csaf_version" : "2.0", "distribution" : { "text" : "Copyright © Red Hat, Inc. All rights reserved.", "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "en", "notes" : [ { "category" : "summary", "text" : "An update for openssh is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title" : "Topic" }, { "category" : "general", "text" : "OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions (CVE-2026-55655)\n\n* openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n\n* openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)\n\n* openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)\n\n* openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title" : "Details" }, { "category" : "legal_disclaimer", "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title" : "Terms of Use" } ], "publisher" : { "category" : "vendor", "contact_details" : "https://access.redhat.com/security/team/contact/", "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name" : "Red Hat Product Security", "namespace" : "https://www.redhat.com" }, "references" : [ { "category" : "self", "summary" : "https://access.redhat.com/errata/RHSA-2026:47756", "url" : "https://access.redhat.com/errata/RHSA-2026:47756" }, { "category" : "external", "summary" : "https://access.redhat.com/security/updates/classification/#important", "url" : "https://access.redhat.com/security/updates/classification/#important" }, { "category" : "external", "summary" : "2462250", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2462250" }, { "category" : "external", "summary" : "2462351", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2462351" }, { "category" : "external", "summary" : "2462493", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2462493" }, { "category" : "external", "summary" : "2497936", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2497936" }, { "category" : "external", "summary" : "2497944", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2497944" }, { "category" : "self", "summary" : "Canonical URL", "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47756.json" } ], "title" : "Red Hat Security Advisory: openssh security update", "tracking" : { "current_release_date" : "2026-08-25T09:43:22+00:00", "generator" : { "date" : "2026-08-25T09:43:22+00:00", "engine" : { "name" : "Red Hat SDEngine", "version" : "5.3.16" } }, "id" : "RHSA-2026:47756", "initial_release_date" : "2026-07-29T23:25:37+00:00", "revision_history" : [ { "date" : "2026-07-29T23:25:37+00:00", "number" : "1", "summary" : "Initial version" }, { "date" : "2026-07-29T23:25:37+00:00", "number" : "2", "summary" : "Last updated version" }, { "date" : "2026-08-25T09:43:22+00:00", "number" : "3", "summary" : "Last generated version" } ], "status" : "final", "version" : "3" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Red Hat Enterprise Linux AppStream (v. 9)", "product" : { "name" : "Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:enterprise_linux:9::appstream" } } }, { "category" : "product_name", "name" : "Red Hat Enterprise Linux BaseOS (v. 9)", "product" : { "name" : "Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS", "product_identification_helper" : { "cpe" : "cpe:/o:redhat:enterprise_linux:9::baseos" } } } ], "category" : "product_family", "name" : "Red Hat Enterprise Linux" }, { "branches" : [ { "category" : "product_version", "name" : "openssh-0:9.9p1-9.el9_8.src", "product" : { "name" : "openssh-0:9.9p1-9.el9_8.src", "product_id" : "openssh-0:9.9p1-9.el9_8.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh@9.9p1-9.el9_8?arch=src" } } } ], "category" : "architecture", "name" : "src" }, { "branches" : [ { "category" : "product_version", "name" : "openssh-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-clients-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-clients-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-keycat-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-keycat-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-server-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-server-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-server-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debugsource@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debuginfo@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "product" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "product_id" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth-debuginfo@0.10.4-7.9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "openssh-askpass-0:9.9p1-9.el9_8.aarch64", "product" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.aarch64", "product_id" : "openssh-askpass-0:9.9p1-9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass@9.9p1-9.el9_8?arch=aarch64" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "product" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "product_id" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth@0.10.4-7.9.el9_8?arch=aarch64" } } } ], "category" : "architecture", "name" : "aarch64" }, { "branches" : [ { "category" : "product_version", "name" : "openssh-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-clients-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-clients-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-server-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-server-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-server-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debugsource@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debuginfo@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "product" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "product_id" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth-debuginfo@0.10.4-7.9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "product" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "product_id" : "openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass@9.9p1-9.el9_8?arch=ppc64le" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "product" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "product_id" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth@0.10.4-7.9.el9_8?arch=ppc64le" } } } ], "category" : "architecture", "name" : "ppc64le" }, { "branches" : [ { "category" : "product_version", "name" : "openssh-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-clients-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-clients-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-keycat-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-keycat-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-server-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-server-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-server-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-debugsource-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-debugsource-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debugsource@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debuginfo@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "product" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "product_id" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth-debuginfo@0.10.4-7.9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "openssh-askpass-0:9.9p1-9.el9_8.s390x", "product" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.s390x", "product_id" : "openssh-askpass-0:9.9p1-9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass@9.9p1-9.el9_8?arch=s390x" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "product" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "product_id" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth@0.10.4-7.9.el9_8?arch=s390x" } } } ], "category" : "architecture", "name" : "s390x" }, { "branches" : [ { "category" : "product_version", "name" : "openssh-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-clients-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-clients-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-keycat-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-keycat-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-server-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-server-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-server-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debugsource@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-debuginfo@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "product" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "product_id" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth-debuginfo@0.10.4-7.9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "openssh-askpass-0:9.9p1-9.el9_8.x86_64", "product" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.x86_64", "product_id" : "openssh-askpass-0:9.9p1-9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/openssh-askpass@9.9p1-9.el9_8?arch=x86_64" } } }, { "category" : "product_version", "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "product" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "product_id" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/pam_ssh_agent_auth@0.10.4-7.9.el9_8?arch=x86_64" } } } ], "category" : "architecture", "name" : "x86_64" } ], "category" : "vendor", "name" : "Red Hat" } ], "relationships" : [ { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-askpass-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-askpass-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-askpass-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64" }, "product_reference" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le" }, "product_reference" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x" }, "product_reference" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64" }, "product_reference" : "pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id" : "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "relates_to_product_reference" : "AppStream-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-0:9.9p1-9.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src" }, "product_reference" : "openssh-0:9.9p1-9.el9_8.src", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-clients-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-clients-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-clients-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-clients-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-debugsource-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-keycat-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-keycat-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-keycat-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-server-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-server-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-server-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-server-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64" }, "product_reference" : "openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" }, { "category" : "default_component_of", "full_product_name" : { "name" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)", "product_id" : "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" }, "product_reference" : "pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "relates_to_product_reference" : "BaseOS-9.8.0.Z.MAIN.EUS" } ] }, "vulnerabilities" : [ { "acknowledgments" : [ { "organization" : "Aisle.com", "summary" : "This issue was discovered by Red Hat." } ], "cve" : "CVE-2026-55653", "cwe" : { "id" : "CWE-415", "name" : "Double Free" }, "discovery_date" : "2026-04-26T18:54:39+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2462351" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This Moderate flaw in OpenSSH affects clients operating in FIPS mode when negotiating Diffie-Hellman Group Exchange (DH-GEX) with a malicious SSH server. While it can lead to client process termination, resulting in a denial of service, the impact is limited to availability and does not result in broader system compromise. In order to exploit this vulnerability the attacker needs to trick the user to connect to an untrusted malicious server or compromise the server first. The availability impact is considered Low as the only impacted process is the single run of the SSH client trying to connect to the malicious server.\n\nThis vulnerability affects only the OpenSSH versions shipped with Red Hat products.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-55653" }, { "category" : "external", "summary" : "RHBZ#2462351", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2462351" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-55653", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-55653" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-55653", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-55653" } ], "release_date" : "2026-06-22T23:17:43.088000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-07-29T23:25:37+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:47756" }, { "category" : "workaround", "details" : "To mitigate this issue, OpenSSH clients operating in FIPS mode should avoid negotiating the `diffie-hellman-group-exchange-sha256` key exchange algorithm. This can be achieved by explicitly listing allowed key exchange algorithms in the client's SSH configuration file (e.g., `/etc/ssh/ssh_config` or `~/.ssh/config`), ensuring `diffie-hellman-group-exchange-sha256` is *not* included. For example, to use a subset of common algorithms, you might configure:\n\n```\nKexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1\n```\n\n(Note: The above example `KexAlgorithms` list is illustrative and should be adjusted based on your environment's security requirements.)\n\nAdditionally, avoid using non-fatal client flows, such as `ssh-keyscan`, against untrusted SSH servers while FIPS mode is enabled. Changes to `ssh_config` will take effect for new SSH connections.", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "LOW", "baseScore" : 4.3, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "REQUIRED", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version" : "3.1" }, "products" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service" }, { "acknowledgments" : [ { "organization" : "Aisle.com", "summary" : "This issue was discovered by Red Hat." } ], "cve" : "CVE-2026-55654", "cwe" : { "id" : "CWE-125", "name" : "Out-of-bounds Read" }, "discovery_date" : "2026-04-26T19:17:42+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2462493" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This flaw is rated Low. A heap out-of-bounds read in OpenSSH's GSSAPI authentication component can lead to a denial of service. Exploitation requires `GSSAPIAuthentication` to be explicitly enabled, which is not the default configuration in Red Hat products, and a Kerberos environment providing authenticated `auth-indicators`. The impact is limited to the availability of the SSH authentication process.\n\nThis vulnerability doesn't affect the upstream OpenSSH versions and is restricted to the versions as shipped with Red Hat Enterprise Linux.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-55654" }, { "category" : "external", "summary" : "RHBZ#2462493", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2462493" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-55654", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-55654" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-55654", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-55654" } ], "release_date" : "2026-06-22T23:18:14.750000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-07-29T23:25:37+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:47756" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "LOW", "baseScore" : 3.7, "baseSeverity" : "LOW", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version" : "3.1" }, "products" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Low" } ], "title" : "openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination" }, { "acknowledgments" : [ { "organization" : "Aisle.com", "summary" : "This issue was discovered by Red Hat." } ], "cve" : "CVE-2026-55655", "cwe" : { "id" : "CWE-923", "name" : "Improper Restriction of Communication Channel to Intended Endpoints" }, "discovery_date" : "2026-04-26T18:39:13+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2462250" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This is a Moderate severity flaw. The OpenSSH client in Red Hat Enterprise Linux is vulnerable to a local man-in-the-middle attack on X11 forwarding connections. Exploitation requires an attacker to have local unprivileged access on the client system and for X11 forwarding to be explicitly enabled and in use, which is not a default configuration. The attack can compromise the confidentiality of forwarded X11 traffic. This vulnerability doesn't affect the upstream OpenSSH versions and is restricted to the versions as shipped with Red Hat Enterprise Linux.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-55655" }, { "category" : "external", "summary" : "RHBZ#2462250", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2462250" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-55655", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-55655" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-55655", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-55655" } ], "release_date" : "2026-06-22T23:22:11.127000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-07-29T23:25:37+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:47756" }, { "category" : "workaround", "details" : "To mitigate this issue, disable X11 forwarding on OpenSSH clients when it is not required. This can be achieved by avoiding the use of `-X` or `-Y` options when invoking `ssh`, or by setting `ForwardX11 no` in the SSH client configuration file (`~/.ssh/config` or `/etc/ssh/ssh_config`). Disabling X11 forwarding will prevent the client from attempting to establish X11 connections, thereby removing the attack vector.", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "LOCAL", "availabilityImpact" : "NONE", "baseScore" : 5.0, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "HIGH", "integrityImpact" : "LOW", "privilegesRequired" : "LOW", "scope" : "UNCHANGED", "userInteraction" : "REQUIRED", "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N", "version" : "3.1" }, "products" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions" }, { "cve" : "CVE-2026-59996", "cwe" : { "id" : "CWE-22", "name" : "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "discovery_date" : "2026-07-08T01:02:02.730076+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2497944" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the `scp` command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to data integrity issues or, in some cases, unauthorized access to sensitive information if files are stored in an exposed location.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "Conditions for Exploitation: Exploitation requires specific user actions and conditions, as the vulnerability only triggers when a user explicitly initiates a file copy between two remote destinations using the scp command. \n\nImpact Limitations: The boundaries of the potential impact are highly contained. The flaw only results in unintended file placement within the parent directory of the target destination. It does not inherently lead to arbitrary code execution, denial of service, or privilege escalation, and any potential data exposure relies heavily on the existing permissions of the parent directory.\n\nRed Hat Enterprise Linux (RHEL) versions 6, 7, and 8 are not affected by this issue.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-59996" }, { "category" : "external", "summary" : "RHBZ#2497944", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2497944" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-59996", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-59996" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-59996", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-59996" }, { "category" : "external", "summary" : "https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2", "url" : "https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2" }, { "category" : "external", "summary" : "https://www.openssh.org/releasenotes.html#10.4p1", "url" : "https://www.openssh.org/releasenotes.html#10.4p1" }, { "category" : "external", "summary" : "https://www.openwall.com/lists/oss-security/2026/07/06/5", "url" : "https://www.openwall.com/lists/oss-security/2026/07/06/5" } ], "release_date" : "2026-07-08T00:07:07.759000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-07-29T23:25:37+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:47756" }, { "category" : "workaround", "details" : "To mitigate this issue, users should avoid performing `scp` operations directly between two remote destinations. Instead, consider copying files from the first remote host to a local machine, and then from the local machine to the second remote host. Alternatively, use `sftp` or `rsync` for remote file transfers, as these utilities are not affected by this specific vulnerability.", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "LOW", "baseScore" : 4.6, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "privilegesRequired" : "LOW", "scope" : "UNCHANGED", "userInteraction" : "REQUIRED", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "version" : "3.1" }, "products" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy" }, { "cve" : "CVE-2026-60002", "cwe" : { "id" : "CWE-825", "name" : "Expired Pointer Dereference" }, "discovery_date" : "2026-07-08T01:01:33.808610+00:00", "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2497936" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This Important flaw in OpenSSH client could allow a malicious SSH server to execute arbitrary code on the connecting client due to a use-after-free vulnerability during host key re-exchange. While requiring a connection to a specially crafted server, the potential for high impact on client confidentiality and integrity elevates the severity beyond Moderate.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-60002" }, { "category" : "external", "summary" : "RHBZ#2497936", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2497936" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-60002", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-60002" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-60002", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-60002" }, { "category" : "external", "summary" : "https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2", "url" : "https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2" }, { "category" : "external", "summary" : "https://www.openssh.org/releasenotes.html#10.4p1", "url" : "https://www.openssh.org/releasenotes.html#10.4p1" }, { "category" : "external", "summary" : "https://www.openwall.com/lists/oss-security/2026/07/06/5", "url" : "https://www.openwall.com/lists/oss-security/2026/07/06/5" } ], "release_date" : "2026-07-08T00:17:33.058000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-07-29T23:25:37+00:00", "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:47756" }, { "category" : "workaround", "details" : "To mitigate this issue, OpenSSH clients should only connect to trusted SSH servers. Enforcing strict host key checking and carefully managing `known_hosts` files can help prevent connections to servers with unexpected or altered host keys, thereby reducing exposure to this client-side vulnerability.", "product_ids" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "LOW", "baseScore" : 7.7, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "version" : "3.1" }, "products" : [ "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-0:0.10.4-7.9.el9_8.x86_64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "AppStream-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.src", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-askpass-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-clients-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-debugsource-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-keycat-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-server-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:openssh-sk-dummy-debuginfo-0:9.9p1-9.el9_8.x86_64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.aarch64", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.ppc64le", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.s390x", "BaseOS-9.8.0.Z.MAIN.EUS:pam_ssh_agent_auth-debuginfo-0:0.10.4-7.9.el9_8.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side" } ] }