Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 7

Vulnerabilities 11

• Medium 6.5
  CVE-2026-106585

  In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during deco…

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  Oct 6, 2026
• Medium 6.5
  CVE-2026-110923 Rejected

  CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552.

  openssh-ssh1 openssh Ubuntu Azure Linux
  Oct 15, 2026
• Medium 5.4
  CVE-2026-110925 Rejected

  CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583.

  openssh-ssh1 Ubuntu
  Oct 15, 2026
• Medium 5.3
  CVE-2026-110926 Rejected

  CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582.

  openssh-ssh1 Ubuntu
  Oct 15, 2026
• Medium 4.3
  CVE-2026-110927 Rejected

  CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.

  openssh-ssh1 Ubuntu
  Oct 15, 2026
• Medium 4.2
  CVE-2026-106552

  In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loc…

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  Oct 6, 2026
• Low 3.7
  CVE-2026-106582

  In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the…

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  Oct 6, 2026
• Low 3.6
  CVE-2026-106587

  In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but …

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  Oct 6, 2026
• Low 2.5
  CVE-2026-106583

  In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  Oct 6, 2026
• Low 2.5
  CVE-2026-106584

  In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mis…

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  Oct 6, 2026
• Low 2.5
  CVE-2026-106586

  In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwa…

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux
  Oct 6, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-106586
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-106583
• report
  https://access.redhat.com/security/cve/CVE-2026-106587
• report
  https://access.redhat.com/security/cve/CVE-2026-106552
• report
  https://access.redhat.com/security/cve/CVE-2026-106582
• report
  https://access.redhat.com/security/cve/CVE-2026-106584
• report
  https://access.redhat.com/security/cve/CVE-2026-106585
• report
  https://access.redhat.com/security/cve/CVE-2026-110925
• report
  https://access.redhat.com/security/cve/CVE-2026-110926
• report
  https://access.redhat.com/security/cve/CVE-2026-110923
• report
  https://access.redhat.com/security/cve/CVE-2026-110927
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82247.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2547187
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-106552
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-106552
• article
  https://www.openssh.org/releasenotes.html#10.6
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2547181
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-106582
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-106582
• article
  https://arxiv.org/abs/2609.07709
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2547243
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-106583
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-106583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2547201
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-106584
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-106584
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2547200
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-106585
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-106585
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2547584
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-106586
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-106586
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2547207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-106587
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-106587
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2553028
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-110923