RHSA-2026:69129
Vulnerability from csaf_redhat - Published: 2026-09-21 07:38 - Updated: 2026-09-21 17:12Summary
Red Hat Security Advisory: openssh security update
Severity
Important
Notes
Topic: An update for openssh is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.
Security Fix(es):
* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)
* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)
* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)
* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)
* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in OpenSSH. The `sftp` client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or placing malicious files in sensitive directories on the client system, which could compromise system integrity.
5.4 (Medium)
Affected products
Fixed
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in `sshd`, the OpenSSH server daemon. When `DisableForwarding=yes` is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over `PermitTunnel=yes`. This allows a remote attacker to bypass intended security restrictions and establish a tunnel, potentially leading to unauthorized network access or circumvention of security policies, even when forwarding is explicitly disabled.
7.5 (High)
Affected products
Fixed
89 products, the same list as for
CVE-2026-59995
Threats
Impact
Important
A flaw was found in OpenSSH's `ssh-agent` component. A misinteraction between agent locking and the `session-bind@openssh.com` extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS#11 tokens or utilize keys with destination restrictions, bypassing intended security controls.
CWE-266 - Incorrect Privilege AssignmentAffected products
Fixed
89 products, the same list as for
CVE-2026-59995
Threats
Impact
Low
A flaw was found in OpenSSH. A use-after-free vulnerability exists in the `ssh` client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A remote attacker with high attack complexity could potentially exploit this to achieve low impact on confidentiality and integrity.
5.6 (Medium)
Affected products
Fixed
89 products, the same list as for
CVE-2026-59995
Threats
Impact
Moderate
A flaw was found in OpenSSH's `sshd` component. The `restrict` keyword, designed to limit tunnel forwarding within the `authorized_keys` file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to unauthorized network access or resource usage through tunnels.
5.4 (Medium)
Affected products
Fixed
89 products, the same list as for
CVE-2026-59995
Threats
Impact
Moderate
References
32 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openssh is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)\n\n* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)\n\n* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)\n\n* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)\n\n* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:69129",
"url": "https://access.redhat.com/errata/RHSA-2026:69129"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2497927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497927"
},
{
"category": "external",
"summary": "2497942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497942"
},
{
"category": "external",
"summary": "2514321",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514321"
},
{
"category": "external",
"summary": "2514327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514327"
},
{
"category": "external",
"summary": "2514328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514328"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69129.json"
}
],
"title": "Red Hat Security Advisory: openssh security update",
"tracking": {
"current_release_date": "2026-09-21T17:12:33+00:00",
"generator": {
"date": "2026-09-21T17:12:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:69129",
"initial_release_date": "2026-09-21T07:38:47+00:00",
"revision_history": [
{
"date": "2026-09-21T07:38:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-21T07:38:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-21T17:12:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-clients-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-clients-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-27.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:9.9p1-27.el10_2.aarch64",
"product": {
"name": "openssh-server-0:9.9p1-27.el10_2.aarch64",
"product_id": "openssh-server-0:9.9p1-27.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@9.9p1-27.el10_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-27.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:9.9p1-27.el10_2.ppc64le",
"product": {
"name": "openssh-server-0:9.9p1-27.el10_2.ppc64le",
"product_id": "openssh-server-0:9.9p1-27.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@9.9p1-27.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-askpass-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-askpass-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-keysign-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-clients-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-clients-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-keycat-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-27.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:9.9p1-27.el10_2.s390x",
"product": {
"name": "openssh-server-0:9.9p1-27.el10_2.s390x",
"product_id": "openssh-server-0:9.9p1-27.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@9.9p1-27.el10_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debugsource@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients-debuginfo@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-debuginfo@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keysign-debuginfo@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server-debuginfo@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-sk-dummy-debuginfo@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-clients-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-clients-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-clients-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-clients@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-keycat@9.9p1-27.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssh-server-0:9.9p1-27.el10_2.x86_64",
"product": {
"name": "openssh-server-0:9.9p1-27.el10_2.x86_64",
"product_id": "openssh-server-0:9.9p1-27.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh-server@9.9p1-27.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-0:9.9p1-27.el10_2.src",
"product": {
"name": "openssh-0:9.9p1-27.el10_2.src",
"product_id": "openssh-0:9.9p1-27.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssh@9.9p1-27.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-askpass-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-keysign-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:9.9p1-27.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src"
},
"product_reference": "openssh-0:9.9p1-27.el10_2.src",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-clients-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-clients-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-clients-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-debugsource-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-keycat-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-server-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-server-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-server-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-server-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
},
"product_reference": "openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-59995",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-07-08T01:01:01.518880+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. The `sftp` client, when used to download files from a malicious server with the \u0027sftp server:/path .\u0027 command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or placing malicious files in sensitive directories on the client system, which could compromise system integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: sftp client allows attacker to control downloaded file location",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59995"
},
{
"category": "external",
"summary": "RHBZ#2497927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59995",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59995"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59995",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59995"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:04:49.995000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:38:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69129"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using the `sftp server:/path .` command when connecting to untrusted or potentially malicious SFTP servers. Exercise caution and verify the authenticity of SFTP servers before initiating file transfers, especially when using commands that implicitly define the download destination, and also avoid running SFTP sessions with elevated privileges (such as root).",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: sftp client allows attacker to control downloaded file location"
},
{
"cve": "CVE-2026-59999",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-07-08T01:01:55.619428+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `sshd`, the OpenSSH server daemon. When `DisableForwarding=yes` is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over `PermitTunnel=yes`. This allows a remote attacker to bypass intended security restrictions and establish a tunnel, potentially leading to unauthorized network access or circumvention of security policies, even when forwarding is explicitly disabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate severity flaw in OpenSSH `sshd` allows `PermitTunnel=yes` to override `DisableForwarding=yes`, potentially bypassing intended security controls. In Red Hat environments where `DisableForwarding` is used to restrict SSH session capabilities, an attacker who compromises a user\u0027s session could still establish a tunnel, leading to unauthorized network access or data exfiltration. This bypass occurs even when administrators explicitly attempt to prevent forwarding, though `PermitTunnel` is not enabled by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59999"
},
{
"category": "external",
"summary": "RHBZ#2497942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59999"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59999",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59999"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:13:08.397000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:38:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69129"
},
{
"category": "workaround",
"details": "To mitigate this issue, if `DisableForwarding=yes` is set in `/etc/ssh/sshd_config` to prevent all forwarding, ensure that `PermitTunnel` is explicitly set to `no` in the same configuration file. This will enforce the intended security policy.\n\nAfter modifying `/etc/ssh/sshd_config`, restart the `sshd` service for the changes to take effect. This may temporarily interrupt active SSH sessions.",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options"
},
{
"cve": "CVE-2026-73281",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-08-11T19:31:35.189709+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514327"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH\u0027s `ssh-agent` component. A misinteraction between agent locking and the `session-bind@openssh.com` extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS#11 tokens or utilize keys with destination restrictions, bypassing intended security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: ssh-agent allows remote execution of local operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has determined that this vulnerability has limited impact. Exploitation requires an authenticated SSH session with agent forwarding enabled and the agent in a locked state. Only OpenSSH versions 8.9 and later contain the vulnerable session-bind@openssh.com extension code. Red Hat Enterprise Linux 6, 7, 8, and RHEL 9 through 9.6 ship OpenSSH versions prior to 8.9 and are not affected. Red Hat may apply this fix in a future update for affected products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73281"
},
{
"category": "external",
"summary": "RHBZ#2514327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73281"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.5",
"url": "https://www.openssh.org/releasenotes.html#10.5"
}
],
"release_date": "2026-08-11T19:10:33.079000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:38:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69129"
},
{
"category": "workaround",
"details": "Avoid using ssh-agent forwarding to untrusted remote hosts, or disable agent forwarding entirely by removing `ForwardAgent yes` from SSH configuration. If agent forwarding is required, avoid locking the agent while forwarded sessions are active.",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssh: OpenSSH: ssh-agent allows remote execution of local operations"
},
{
"cve": "CVE-2026-73282",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-08-11T19:31:39.544427+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514328"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. A use-after-free vulnerability exists in the `ssh` client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A remote attacker with high attack complexity could potentially exploit this to achieve low impact on confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A use-after-free flaw exists in OpenSSH\u0027s ssh client during concurrent remote-forwarding processing. When adding a remote forward via the local session multiplexing socket while a server remote-forward open request is pending, realloc data management fails, freeing memory that remains actively referenced. A remote attacker with high attack complexity can exploit this timing window to corrupt process memory, posing a low impact to confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73282"
},
{
"category": "external",
"summary": "RHBZ#2514328",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514328"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73282"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.5",
"url": "https://www.openssh.org/releasenotes.html#10.5"
}
],
"release_date": "2026-08-11T19:12:24.334000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:38:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69129"
},
{
"category": "workaround",
"details": "Avoid issuing dynamic remote-forwarding commands over active SSH multiplexing connections, or disable socket multiplexing by setting ControlMaster no in ~/.ssh/config.",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client"
},
{
"cve": "CVE-2026-73283",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-08-11T19:31:05.763903+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514321"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH\u0027s `sshd` component. The `restrict` keyword, designed to limit tunnel forwarding within the `authorized_keys` file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to unauthorized network access or resource usage through tunnels.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Tunnel forwarding restriction bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An authorization bypass flaw was found in OpenSSH\u0027s sshd daemon. When processing SSH public key authentication, sshd fails to enforce the restrict keyword in authorized_keys against TUN/TAP tunnel forwarding requests. An authenticated user holding a restricted key can still establish virtual network interface tunnels if tunnel forwarding is globally enabled on the server. This allows authorized users to bypass intended per-key restriction policies, posing a Moderate impact to confidentiality and integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73283"
},
{
"category": "external",
"summary": "RHBZ#2514321",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514321"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73283"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.5",
"url": "https://www.openssh.org/releasenotes.html#10.5"
}
],
"release_date": "2026-08-11T19:15:24.335000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:38:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69129"
},
{
"category": "workaround",
"details": "Set PermitTunnel no in /etc/ssh/sshd_config to disable TUN/TAP tunnel forwarding server-wide. Alternatively, restrict tunnel permissions for specific users or groups using Match blocks in sshd_config or explicit no-tun directives in authorized_keys.",
"product_ids": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"AppStream-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.src",
"BaseOS-10.2.Z:openssh-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-askpass-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-clients-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-debugsource-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keycat-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-keysign-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-server-debuginfo-0:9.9p1-27.el10_2.x86_64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.aarch64",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.ppc64le",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.s390x",
"BaseOS-10.2.Z:openssh-sk-dummy-debuginfo-0:9.9p1-27.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: Tunnel forwarding restriction bypass"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…