| Name: | openssh |
|---|---|
| Version: | 9.9p1 |
| Release: | 7.0.2.el9_8 |
| Architecture: | x86_64 |
| Group: | Unspecified |
| Size: | 1820144 |
| License: | BSD |
| RPM: | openssh-9.9p1-7.0.2.el9_8.x86_64.rpm |
| Source RPM: | openssh-9.9p1-7.0.2.el9_8.src.rpm |
| Build Date: | Fri May 22 2026 |
| Build Host: | build-ol9-x86_64.oracle.com |
| Vendor: | Oracle America |
| URL: | http://www.openssh.com/portable.html |
| Summary: | An open source implementation of SSH protocol version 2 |
| Description: | SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. |
- Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]
- Upstream references found with /usr/bin/ssh [Orabug: 37814929]
- Version bump
- CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155825 - Fix incorrect claim about SSH_AUTH_SOCK in pam_ssh_agent_auth manual page Resolves: RHEL-122302
- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580
- Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960
- Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372
- Rebase to version 9.9 Resolves: RHEL-108912
- Move the redhat help message to debug1 log level Resolves: RHEL-104580
- Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700