Summary
[8.0p1-30.0.1]
- Update upstream references [Orabug: 36587718]
[8.0p1-30]
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
FIPS known-group validation that leads to client-side denial of service
Resolves: RHEL-185775
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
pre-binding
Resolves: RHEL-185855
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | openssh | 0:8.0p1-30.0.1.el8_10 |
| Oracle Linux · 8 | openssh-askpass | 0:8.0p1-30.0.1.el8_10 |
| Oracle Linux · 8 | openssh-cavs | 0:8.0p1-30.0.1.el8_10 |
| Oracle Linux · 8 | openssh-clients | 0:8.0p1-30.0.1.el8_10 |
| Oracle Linux · 8 | openssh-keycat | 0:8.0p1-30.0.1.el8_10 |
| Oracle Linux · 8 | openssh-ldap | 0:8.0p1-30.0.1.el8_10 |
| Oracle Linux · 8 | openssh-server | 0:8.0p1-30.0.1.el8_10 |
| Oracle Linux · 8 | pam_ssh_agent_auth | 0:0.10.3-7.30.0.1.el8_10 |
Vulnerabilities 2
-
Medium 5.0
Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X …
-
Medium 4.3
Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the clie…