RLSA-2026:97866 — Moderate: openssh security update

Summary

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997)

* openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (CVE-2026-59998)

* openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 52

Release	Package	Fixed in
Rocky Linux · 9	openssh	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-askpass-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-clients-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debugsource	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debugsource	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debugsource	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-debugsource	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-keycat-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	openssh-server-debuginfo	0:9.9p1-16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth	0:0.10.4-10.16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth	0:0.10.4-10.16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth	0:0.10.4-10.16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth	0:0.10.4-10.16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth-debuginfo	0:0.10.4-10.16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth-debuginfo	0:0.10.4-10.16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth-debuginfo	0:0.10.4-10.16.el9_9.rocky.0.1
Rocky Linux · 9	pam_ssh_agent_auth-debuginfo	0:0.10.4-10.16.el9_9.rocky.0.1

Vulnerabilities 3

Medium 4.8

CVE-2026-59998

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if t…

OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine

Jul 8, 2026
Medium 4.2

CVE-2026-59997

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important…

OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine

Jul 8, 2026
Low 3.7

CVE-2026-60000

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive a…

OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine

Jul 8, 2026

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2497929
report
https://bugzilla.redhat.com/show_bug.cgi?id=2497935
report
https://bugzilla.redhat.com/show_bug.cgi?id=2497946
advisory
https://access.redhat.com/errata/RHSA-2026:97866

Moderate: openssh security update

Summary

Fixed packages 52

Vulnerabilities 3

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if t…

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important…

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive a…

References