Vulnerability-Lookup

RHSA-2026:12389

Vulnerability from csaf_redhat - Published: 2026-04-30 16:40 - Updated: 2026-05-26 20:18

Summary

Red Hat Security Advisory: openssh security update

Severity

Important

Notes

Topic: An update for openssh is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385) * OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414) * OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387) * OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388) * OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-35385

A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-281 - Improper Preservation of Permissions

Affected products

Fixed 106 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround

Known not affected 8 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround

Threats

Impact Important

CVE-2026-35386

A flaw was found in OpenSSH. This vulnerability allows a remote attacker to achieve arbitrary command execution by injecting shell metacharacters into a username provided on the command line. Exploitation requires an untrusted username and a non-default configuration of the '%' character in `ssh_config`.

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 106 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround

Known not affected 8 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround

Threats

Impact Low

CVE-2026-35387

A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm (ECDSA) algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than intended. This could potentially allow an attacker to compromise the confidentiality of data.

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-115 - Misinterpretation of Input

Affected products

Fixed 106 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround

Known not affected 8 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround

Threats

Impact Low

CVE-2026-35388

A flaw was found in OpenSSH. This vulnerability allows for a low integrity impact due to the omission of connection multiplexing confirmation for proxy-mode multiplexing sessions. A local user, under specific and complex conditions requiring user interaction, could potentially establish a multiplexed session without explicit confirmation, leading to unintended data handling.

2.2 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

CWE-306 - Missing Authentication for Critical Function

Affected products

Fixed 106 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround

Known not affected 8 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround

Threats

Impact Low

CVE-2026-35414

A flaw was found in OpenSSH. This vulnerability arises from the incorrect handling of the authorized_keys principals option in uncommon scenarios. Specifically, when a principals list is used with a Certificate Authority that includes comma characters, OpenSSH may misinterpret the input. This could lead to security bypasses, potentially allowing unintended access or information disclosure in specific authentication contexts.

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-168 - Improper Handling of Inconsistent Special Elements

Affected products

Fixed 106 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Vendor Fix fix Workaround

Known not affected 8 products

Product	Version	Remediation
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x	—	Workaround
Unresolved product id: BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64	—	Workaround

Threats

Impact Moderate

References

31 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:12389	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2454469	external
https://bugzilla.redhat.com/show_bug.cgi?id=2454490	external
https://bugzilla.redhat.com/show_bug.cgi?id=2454494	external
https://bugzilla.redhat.com/show_bug.cgi?id=2454500	external
https://bugzilla.redhat.com/show_bug.cgi?id=2454506	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-35385	self
https://bugzilla.redhat.com/show_bug.cgi?id=2454469	external
https://www.cve.org/CVERecord?id=CVE-2026-35385	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35385	external
https://marc.info/?l=openssh-unix-dev&m=177513443…	external
https://www.openssh.org/releasenotes.html#10.3p1	external
https://www.openwall.com/lists/oss-security/2026/…	external
https://access.redhat.com/security/cve/CVE-2026-35386	self
https://bugzilla.redhat.com/show_bug.cgi?id=2454506	external
https://www.cve.org/CVERecord?id=CVE-2026-35386	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35386	external
https://access.redhat.com/security/cve/CVE-2026-35387	self
https://bugzilla.redhat.com/show_bug.cgi?id=2454494	external
https://www.cve.org/CVERecord?id=CVE-2026-35387	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35387	external
https://access.redhat.com/security/cve/CVE-2026-35388	self
https://bugzilla.redhat.com/show_bug.cgi?id=2454500	external
https://www.cve.org/CVERecord?id=CVE-2026-35388	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35388	external
https://access.redhat.com/security/cve/CVE-2026-35414	self
https://bugzilla.redhat.com/show_bug.cgi?id=2454490	external
https://www.cve.org/CVERecord?id=CVE-2026-35414	external
https://nvd.nist.gov/vuln/detail/CVE-2026-35414	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for openssh is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)\n\n* OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)\n\n* OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)\n\n* OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)\n\n* OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:12389",
        "url": "https://access.redhat.com/errata/RHSA-2026:12389"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2454469",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
      },
      {
        "category": "external",
        "summary": "2454490",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454490"
      },
      {
        "category": "external",
        "summary": "2454494",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454494"
      },
      {
        "category": "external",
        "summary": "2454500",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454500"
      },
      {
        "category": "external",
        "summary": "2454506",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454506"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12389.json"
      }
    ],
    "title": "Red Hat Security Advisory: openssh security update",
    "tracking": {
      "current_release_date": "2026-05-26T20:18:55+00:00",
      "generator": {
        "date": "2026-05-26T20:18:55+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2026:12389",
      "initial_release_date": "2026-04-30T16:40:54+00:00",
      "revision_history": [
        {
          "date": "2026-04-30T16:40:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-30T16:40:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-26T20:18:55+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
                  "product_id": "AppStream-10.0.Z.E2S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
                  "product_id": "BaseOS-10.0.Z.E2S",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:9.9p1-7.el10_0.3.aarch64",
                "product": {
                  "name": "openssh-server-0:9.9p1-7.el10_0.3.aarch64",
                  "product_id": "openssh-server-0:9.9p1-7.el10_0.3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@9.9p1-7.el10_0.3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
                "product": {
                  "name": "openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_id": "openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@9.9p1-7.el10_0.3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-clients-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-clients-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:9.9p1-7.el10_0.3.s390x",
                "product": {
                  "name": "openssh-server-0:9.9p1-7.el10_0.3.s390x",
                  "product_id": "openssh-server-0:9.9p1-7.el10_0.3.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@9.9p1-7.el10_0.3?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:9.9p1-7.el10_0.3.x86_64",
                "product": {
                  "name": "openssh-server-0:9.9p1-7.el10_0.3.x86_64",
                  "product_id": "openssh-server-0:9.9p1-7.el10_0.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@9.9p1-7.el10_0.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:9.9p1-7.el10_0.3.src",
                "product": {
                  "name": "openssh-0:9.9p1-7.el10_0.3.src",
                  "product_id": "openssh-0:9.9p1-7.el10_0.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@9.9p1-7.el10_0.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.src",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
          "product_id": "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "AppStream-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.src",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-server-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
          "product_id": "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        },
        "product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
        "relates_to_product_reference": "BaseOS-10.0.Z.E2S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-35385",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-04-02T17:01:07.052864+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454469"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ],
        "known_not_affected": [
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454469",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T16:30:59.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-30T16:40:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:12389"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode"
    },
    {
      "cve": "CVE-2026-35386",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-02T18:02:24.149353+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454506"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. This vulnerability allows a remote attacker to achieve arbitrary command execution by injecting shell metacharacters into a username provided on the command line. Exploitation requires an untrusted username and a non-default configuration of the \u0027%\u0027 character in `ssh_config`.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat products do not ship in a configuration which is subject to this vulnerability. Additionally, the impact of the command execution is limited to the scope of the specific user account which users would need to create themselves.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ],
        "known_not_affected": [
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35386"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454506",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454506"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35386",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35386"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35386",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35386"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T16:44:27.806000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-30T16:40:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:12389"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username"
    },
    {
      "cve": "CVE-2026-35387",
      "cwe": {
        "id": "CWE-115",
        "name": "Misinterpretation of Input"
      },
      "discovery_date": "2026-04-02T18:01:38.952994+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454494"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm (ECDSA) algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than intended. This could potentially allow an attacker to compromise the confidentiality of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The cipher choices which may be used as a result of this flaw may provide fewer bits of security than those configured by the user, however they are all still considered cryptographically secure. Users who work in regulated environments may however find themselves using ciphers which are not approved in their regulatory environment.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ],
        "known_not_affected": [
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35387"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454494",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454494"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35387",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35387"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35387",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35387"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T16:52:53.623000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-30T16:40:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:12389"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage"
    },
    {
      "cve": "CVE-2026-35388",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "discovery_date": "2026-04-02T18:02:01.536010+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454500"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. This vulnerability allows for a low integrity impact due to the omission of connection multiplexing confirmation for proxy-mode multiplexing sessions. A local user, under specific and complex conditions requiring user interaction, could potentially establish a multiplexed session without explicit confirmation, leading to unintended data handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ],
        "known_not_affected": [
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35388"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454500",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454500"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35388",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35388"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35388",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35388"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T16:57:31.073000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-30T16:40:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:12389"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions"
    },
    {
      "cve": "CVE-2026-35414",
      "cwe": {
        "id": "CWE-168",
        "name": "Improper Handling of Inconsistent Special Elements"
      },
      "discovery_date": "2026-04-02T18:01:25.983089+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454490"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. This vulnerability arises from the incorrect handling of the authorized_keys principals option in uncommon scenarios. Specifically, when a principals list is used with a Certificate Authority that includes comma characters, OpenSSH may misinterpret the input. This could lead to security bypasses, potentially allowing unintended access or information disclosure in specific authentication contexts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The risk posed by this flaw to Red Hat products is limited. The use of SSH certificates is not enabled by default and requires that users opt-in to the feature. Further, when following documented guidance ssh connections should only be permitted to non-root users which will limit the impact of this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
          "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ],
        "known_not_affected": [
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
          "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35414"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454490",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454490"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35414",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35414"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35414",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35414"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T17:08:15.628000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-30T16:40:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:12389"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "AppStream-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "AppStream-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.src",
            "BaseOS-10.0.Z.E2S:openssh-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-askpass-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-clients-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-debugsource-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keycat-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-keysign-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-server-debuginfo-0:9.9p1-7.el10_0.3.x86_64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.aarch64",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.ppc64le",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.s390x",
            "BaseOS-10.0.Z.E2S:openssh-sk-dummy-debuginfo-0:9.9p1-7.el10_0.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option"
    }
  ]
}

CVE-2026-35385 (GCVE-0-2026-35385)

Vulnerability from cvelistv5 – Published: 2026-04-02 16:30 – Updated: 2026-04-03 03:55

Summary

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-281 - Improper Preservation of Permissions

Assigner

mitre

References

3 references

URL	Tags
https://www.openssh.org/releasenotes.html#10.3p1
https://marc.info/?l=openssh-unix-dev&m=177513443…
https://www.openwall.com/lists/oss-security/2026/…

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.3 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35385",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-02T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-03T03:55:44.273Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users\u0027 expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-281",
              "description": "CWE-281 Improper Preservation of Permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:15:37.128Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-35385",
    "datePublished": "2026-04-02T16:30:59.615Z",
    "dateReserved": "2026-04-02T16:30:59.107Z",
    "dateUpdated": "2026-04-03T03:55:44.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35386 (GCVE-0-2026-35386)

Vulnerability from cvelistv5 – Published: 2026-04-02 16:44 – Updated: 2026-04-03 03:55

Summary

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.

Severity

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-696 - Incorrect Behavior Order

Assigner

mitre

References

3 references

URL	Tags
https://www.openssh.org/releasenotes.html#10.3p1
https://marc.info/?l=openssh-unix-dev&m=177513443…
https://www.openwall.com/lists/oss-security/2026/…

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.3 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35386",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-02T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-03T03:55:45.599Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-696",
              "description": "CWE-696 Incorrect Behavior Order",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:15:59.616Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-35386",
    "datePublished": "2026-04-02T16:44:27.806Z",
    "dateReserved": "2026-04-02T16:44:27.451Z",
    "dateUpdated": "2026-04-03T03:55:45.599Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35387 (GCVE-0-2026-35387)

Vulnerability from cvelistv5 – Published: 2026-04-02 16:52 – Updated: 2026-04-03 13:07

Summary

OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-670 - Always-Incorrect Control Flow Implementation

Assigner

mitre

References

3 references

URL	Tags
https://www.openssh.org/releasenotes.html#10.3p1
https://marc.info/?l=openssh-unix-dev&m=177513443…
https://www.openwall.com/lists/oss-security/2026/…

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.3 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35387",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-03T13:07:49.157611Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-03T13:07:56.358Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-670",
              "description": "CWE-670 Always-Incorrect Control Flow Implementation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:16:21.122Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-35387",
    "datePublished": "2026-04-02T16:52:53.623Z",
    "dateReserved": "2026-04-02T16:52:52.884Z",
    "dateUpdated": "2026-04-03T13:07:56.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35388 (GCVE-0-2026-35388)

Vulnerability from cvelistv5 – Published: 2026-04-02 16:57 – Updated: 2026-04-02 18:16

Summary

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Severity

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE

CWE-420 - Unprotected Alternate Channel

Assigner

mitre

References

3 references

URL	Tags
https://www.openssh.org/releasenotes.html#10.3p1
https://marc.info/?l=openssh-unix-dev&m=177513443…
https://www.openwall.com/lists/oss-security/2026/…

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.3 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-02T17:46:05.234251Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-02T17:46:41.643Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-420",
              "description": "CWE-420 Unprotected Alternate Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:16:41.820Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-35388",
    "datePublished": "2026-04-02T16:57:31.073Z",
    "dateReserved": "2026-04-02T16:57:30.433Z",
    "dateUpdated": "2026-04-02T18:16:41.820Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-35414 (GCVE-0-2026-35414)

Vulnerability from cvelistv5 – Published: 2026-04-02 17:08 – Updated: 2026-04-02 18:17

Summary

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Severity

4.2 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE

CWE-670 - Always-Incorrect Control Flow Implementation

Assigner

mitre

References

3 references

URL	Tags
https://www.openssh.org/releasenotes.html#10.3p1
https://marc.info/?l=openssh-unix-dev&m=177513443…
https://www.openwall.com/lists/oss-security/2026/…

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.3 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-35414",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-02T17:42:45.278974Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-02T17:43:24.725Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-670",
              "description": "CWE-670 Always-Incorrect Control Flow Implementation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:17:04.391Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-35414",
    "datePublished": "2026-04-02T17:08:15.628Z",
    "dateReserved": "2026-04-02T17:08:15.208Z",
    "dateUpdated": "2026-04-02T18:17:04.391Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:12389

CVE-2026-35385 (GCVE-0-2026-35385)

CVE-2026-35386 (GCVE-0-2026-35386)

CVE-2026-35387 (GCVE-0-2026-35387)

CVE-2026-35388 (GCVE-0-2026-35388)

CVE-2026-35414 (GCVE-0-2026-35414)

Tags

Sightings

Nomenclature