Skip to content
OpenAdvisories
Medium ALAS2023-2026-2031 4 CVEs

Moderate: openssh security update (Amazon Linux 2023)

Published Aug 3, 2026 · Updated Aug 4, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60002: ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.) CVE-2026-59996: scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. CVE-2026-55655: A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session. CVE-2026-55653: A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Fixed packages 13

ReleasePackageFixed in
Amazon Linux · 2023 openssh 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-clients 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-clients-debuginfo 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-debuginfo 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-debugsource 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-keycat 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-keycat-debuginfo 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-server 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-server-debuginfo 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-sk-dummy 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 openssh-sk-dummy-debuginfo 0:9.9p1-10.amzn2023.0.1
Amazon Linux · 2023 pam_ssh_agent_auth 0:0.10.4-9.10.amzn2023.0.1
Amazon Linux · 2023 pam_ssh_agent_auth-debuginfo 0:0.10.4-9.10.amzn2023.0.1

Vulnerabilities 4

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-55653.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-55655.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59996.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-60002.html