Summary
[7.4p1-23.0.5]
- Fix privilege escalation via scp legacy protocol when not in preserving
file mode [CVE-2026-35385][Orabug: 39480251]
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssh | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | openssh-askpass | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | openssh-cavs | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | openssh-clients | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | openssh-keycat | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | openssh-ldap | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | openssh-server | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | openssh-server-sysvinit | 0:7.4p1-23.0.5.el7_9 |
| Oracle Linux · 7 | pam_ssh_agent_auth | 0:0.10.3-2.23.0.5.el7_9 |
Vulnerabilities 1
-
High 7.5
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' …