Fixed packages 26
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-askpass | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-askpass-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-cavs-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-clients-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-debugsource | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-keycat-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-ldap-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | openssh-server-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pam_ssh_agent_auth-debuginfo | 0:0.10.3-7.30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-askpass-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-cavs | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-cavs-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-clients | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-clients-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-debugsource | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-keycat | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-keycat-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-ldap | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-ldap-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-server | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | openssh-server-debuginfo | 0:8.0p1-30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | pam_ssh_agent_auth | 0:0.10.3-7.30.el8_10 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | pam_ssh_agent_auth-debuginfo | 0:0.10.3-7.30.el8_10 |
Vulnerabilities 2
-
Medium 5.0
Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X …
-
Medium 4.3
Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the clie…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2462250
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2462351
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47755.json
-
report
https://access.redhat.com/security/cve/CVE-2026-55653
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-55653
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-55653
-
report
https://access.redhat.com/security/cve/CVE-2026-55655
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-55655
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-55655