| Name: | openssh |
|---|---|
| Version: | 9.9p1 |
| Release: | 23.0.1.el10_2 |
| Architecture: | aarch64 |
| Group: | Unspecified |
| Size: | 1444187 |
| License: | BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND sprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant |
| RPM: | openssh-9.9p1-23.0.1.el10_2.aarch64.rpm |
| Source RPM: | openssh-9.9p1-23.0.1.el10_2.src.rpm |
| Build Date: | Sun May 24 2026 |
| Build Host: | build-ol10-aarch64.oracle.com |
| Vendor: | Oracle America |
| URL: | http://www.openssh.com/portable.html |
| Summary: | An open source implementation of SSH protocol version 2 |
| Description: | SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. |
- Upstream references found with /usr/bin/ssh [Orabug: 37824421]
- CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166238 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166222 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166190 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166206
- Version bump
- CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155812
- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151579
- Support of hybrid MLKEM key exchange methods in FIPS mode Resolves: RHEL-125929
- Adding a mechanism to disable GSSAPIDelegateCredentials in sshd_config Resolves: RHEL-5281
- CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128399 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128388
- Implement mlkem768nistp256-sha256 and mlkem1024nistp384-sha384 KEX methods Resolves: RHEL-70824
- Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-118406 - Canonicalize username when matching a user Resolves: RHEL-101440