Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | openssh | 0:10.5p1-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | openssh-askpass | 0:10.5p1-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | openssh-clients | 0:10.5p1-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | openssh-keycat | 0:10.5p1-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | openssh-keysign | 0:10.5p1-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | openssh-server | 0:10.5p1-1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | openssh-sk-dummy | 0:10.5p1-1.hum1 |
Vulnerabilities 3
-
Medium 4.8
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding opera…
-
Low 3.5
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, includ…
-
Low 2.5
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwa…
References
-
article
https://images.redhat.com/
-
report
https://access.redhat.com/security/cve/CVE-2026-73283
-
article
https://access.redhat.com/security/updates/classification/
-
report
https://access.redhat.com/security/cve/CVE-2026-73282
-
report
https://access.redhat.com/security/cve/CVE-2026-73281
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70719.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2514327
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-73281
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-73281
-
article
https://www.openssh.org/releasenotes.html#10.5
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2514328
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-73282
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-73282
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2514321
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-73283
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-73283