RLSA-2026:69266
RLSA-2026:69266 · Important: openssh security, bug fix, and enhancement update
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282) Bug Fix(es) and Enhancement(s): * Incomplete backport of CVE-2023-38408 in Rocky Linux 8 openssh (JIRA:Rocky Linux-234763) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 7.5 · Alta · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
openssh Rocky Linux:8
- Intervalos de versiones afectados
- ECOSYSTEM: < 0:8.0p1-33.el8_10
Actualiza a 0:8.0p1-33.el8_10