Summary
[9.9p1-13.0.1]
- Upstream references found with /usr/bin/ssh [Orabug: 37824421]
[9.9p1-13]
- CVE-2026-3497: Fix information disclosure or denial of service due
to uninitialized variables in gssapi-keyex
Resolves: RHEL-155811
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | openssh | 0:9.9p1-13.0.1.el10_1 |
| Oracle Linux · 10 | openssh-askpass | 0:9.9p1-13.0.1.el10_1 |
| Oracle Linux · 10 | openssh-clients | 0:9.9p1-13.0.1.el10_1 |
| Oracle Linux · 10 | openssh-keycat | 0:9.9p1-13.0.1.el10_1 |
| Oracle Linux · 10 | openssh-keysign | 0:9.9p1-13.0.1.el10_1 |
| Oracle Linux · 10 | openssh-server | 0:9.9p1-13.0.1.el10_1 |
Vulnerabilities 1
-
Low 2.7
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAP…