p PatchFirst

ALSA-2026:69266

ALSA-2026:69266 · Important: openssh security, bug fix, and enhancement update

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282) Bug Fix(es) and Enhancement(s): * Incomplete backport of CVE-2023-38408 in AlmaLinux 8 openssh (JIRA:AlmaLinux-234763) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Corrección disponible

Publicación
Actualización

Pila tecnológica: system · network

Productos y versiones afectados

  • openssh AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 8.0p1-33.el8_10

    Actualiza a 8.0p1-33.el8_10

  • openssh-askpass AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 8.0p1-33.el8_10

    Actualiza a 8.0p1-33.el8_10

  • openssh-cavs AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 8.0p1-33.el8_10

    Actualiza a 8.0p1-33.el8_10

  • openssh-clients AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 8.0p1-33.el8_10

    Actualiza a 8.0p1-33.el8_10

  • openssh-keycat AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 8.0p1-33.el8_10

    Actualiza a 8.0p1-33.el8_10

  • openssh-ldap AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 8.0p1-33.el8_10

    Actualiza a 8.0p1-33.el8_10

  • openssh-server AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 8.0p1-33.el8_10

    Actualiza a 8.0p1-33.el8_10

  • pam_ssh_agent_auth AlmaLinux:8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 0.10.3-8.33.el8_10

    Actualiza a 0.10.3-8.33.el8_10

Fuentes originales

Comprueba tu servidor →