Vulnerability-Lookup

RHSA-2026:99592

Vulnerability from csaf_redhat - Published: 2026-11-12 10:48 - Updated: 2026-11-12 10:49

Summary

Red Hat Security Advisory: openssh security update

Severity

Important

Notes

Topic: An update for openssh is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions (CVE-2026-55655) * openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653) * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: openssh: Information disclosure via shared compression side-channel (CVE-2026-106582) * openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication (CVE-2026-106553) * openssh: openssh: Denial of service via oversized decompressed packets (CVE-2026-106585) * openssh: openssh: Command injection via unvalidated command-line username (CVE-2026-106583) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-415 - Double Free

Affected products

Fixed 50 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64	—	Vendor Fix fix Workaround

Known not affected 4 products

Product	Version	Remediation
Unresolved product id: AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64	—	Workaround
Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64	—	Workaround
Unresolved product id: BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64	—	Workaround
Unresolved product id: BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64	—	Workaround

Threats

Impact Moderate

CVE-2026-55655

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.

5.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

CWE-923 - Improper Restriction of Communication Channel to Intended Endpoints

Affected products

Fixed 50 products, the same list as for CVE-2026-55653

Known not affected 4 products, the same list as for CVE-2026-55653

Threats

Impact Moderate

CVE-2026-59995

A flaw was found in OpenSSH. The `sftp` client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or placing malicious files in sensitive directories on the client system, which could compromise system integrity.

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory

Affected products

Fixed 50 products, the same list as for CVE-2026-55653

Known not affected 4 products, the same list as for CVE-2026-55653

Threats

Impact Moderate

CVE-2026-59999

A flaw was found in `sshd`, the OpenSSH server daemon. When `DisableForwarding=yes` is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over `PermitTunnel=yes`. This allows a remote attacker to bypass intended security restrictions and establish a tunnel, potentially leading to unauthorized network access or circumvention of security policies, even when forwarding is explicitly disabled.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-358 - Improperly Implemented Security Check for Standard

Affected products

Fixed 50 products, the same list as for CVE-2026-55653

Known not affected 4 products, the same list as for CVE-2026-55653

Threats

Impact Important

CVE-2026-106553

A flaw was found in OpenSSH. When Generic Security Services Application Programming Interface (GSSAPI) authentication is enabled, the SSH daemon fails to properly discard credentials after a failed authentication attempt. If a user subsequently authenticates through another method, the leftover credentials can persist and become inappropriately accessible to that session. This issue allows an authenticated user to access lingering credentials, leading to information disclosure.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-459 - Incomplete Cleanup

Affected products

Fixed 50 products, the same list as for CVE-2026-55653

Known not affected 4 products, the same list as for CVE-2026-55653

Threats

Impact Moderate

CVE-2026-106582

A flaw was found in OpenSSH. When session compression is enabled, an attacker with access to a shared Secure Shell (SSH) connection can exploit the compression state shared across multiplexed channels. By analyzing changes in transmitted packet lengths caused by repeated data patterns, the attacker may deduce and recover sensitive plaintext information transmitted over concurrent channels in the same session.

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-205 - Observable Behavioral Discrepancy

Affected products

Fixed 50 products, the same list as for CVE-2026-55653

Known not affected 4 products, the same list as for CVE-2026-55653

Threats

Impact Low

CVE-2026-106583

A flaw was found in OpenSSH. The OpenSSH client insufficiently sanitizes command-line usernames containing special characters, such as dollar signs and backslashes. When untrusted input is passed to the client command line, an attacker can exploit this issue to perform command injection through shell-evaluated options such as ProxyCommand, potentially leading to arbitrary command execution.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command

Affected products

Fixed 50 products, the same list as for CVE-2026-55653

Known not affected 4 products, the same list as for CVE-2026-55653

Threats

Impact Important

CVE-2026-106585

A flaw was found in OpenSSH. A remote attacker can trigger a denial of service (DoS) or abnormal packet processing by transmitting crafted, highly compressed data to a vulnerable client or server. The application fails to verify that decompressed payloads remain within the maximum permitted packet length limits, allowing oversized packets to be processed.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 50 products, the same list as for CVE-2026-55653

Known not affected 4 products, the same list as for CVE-2026-55653

Threats

Impact Moderate

References

48 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:99592	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2462250	external
https://bugzilla.redhat.com/show_bug.cgi?id=2462351	external
https://bugzilla.redhat.com/show_bug.cgi?id=2497927	external
https://bugzilla.redhat.com/show_bug.cgi?id=2497942	external
https://bugzilla.redhat.com/show_bug.cgi?id=2547181	external
https://bugzilla.redhat.com/show_bug.cgi?id=2547191	external
https://bugzilla.redhat.com/show_bug.cgi?id=2547200	external
https://bugzilla.redhat.com/show_bug.cgi?id=2547243	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-55653	self
https://bugzilla.redhat.com/show_bug.cgi?id=2462351	external
https://www.cve.org/CVERecord?id=CVE-2026-55653	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55653	external
https://access.redhat.com/security/cve/CVE-2026-55655	self
https://bugzilla.redhat.com/show_bug.cgi?id=2462250	external
https://www.cve.org/CVERecord?id=CVE-2026-55655	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55655	external
https://access.redhat.com/security/cve/CVE-2026-59995	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497927	external
https://www.cve.org/CVERecord?id=CVE-2026-59995	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59995	external
https://marc.info/?l=openssh-unix-dev&m=178333966…	external
https://www.openssh.org/releasenotes.html#10.4p1	external
https://www.openwall.com/lists/oss-security/2026/…	external
https://access.redhat.com/security/cve/CVE-2026-59999	self
https://bugzilla.redhat.com/show_bug.cgi?id=2497942	external
https://www.cve.org/CVERecord?id=CVE-2026-59999	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59999	external
https://access.redhat.com/security/cve/CVE-2026-106553	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547191	external
https://www.cve.org/CVERecord?id=CVE-2026-106553	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106553	external
https://www.openssh.org/releasenotes.html#10.6	external
https://access.redhat.com/security/cve/CVE-2026-106582	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547181	external
https://www.cve.org/CVERecord?id=CVE-2026-106582	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106582	external
https://arxiv.org/abs/2609.07709	external
https://access.redhat.com/security/cve/CVE-2026-106583	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547243	external
https://www.cve.org/CVERecord?id=CVE-2026-106583	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106583	external
https://access.redhat.com/security/cve/CVE-2026-106585	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547200	external
https://www.cve.org/CVERecord?id=CVE-2026-106585	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106585	external

Acknowledgments

Aisle.com

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for openssh is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions (CVE-2026-55655)\n\n* openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n\n* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)\n\n* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)\n\n* openssh: openssh: Information disclosure via shared compression side-channel (CVE-2026-106582)\n\n* openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication (CVE-2026-106553)\n\n* openssh: openssh: Denial of service via oversized decompressed packets (CVE-2026-106585)\n\n* openssh: openssh: Command injection via unvalidated command-line username (CVE-2026-106583)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:99592",
        "url": "https://access.redhat.com/errata/RHSA-2026:99592"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2462250",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462250"
      },
      {
        "category": "external",
        "summary": "2462351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462351"
      },
      {
        "category": "external",
        "summary": "2497927",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497927"
      },
      {
        "category": "external",
        "summary": "2497942",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497942"
      },
      {
        "category": "external",
        "summary": "2547181",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547181"
      },
      {
        "category": "external",
        "summary": "2547191",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547191"
      },
      {
        "category": "external",
        "summary": "2547200",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547200"
      },
      {
        "category": "external",
        "summary": "2547243",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547243"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99592.json"
      }
    ],
    "title": "Red Hat Security Advisory: openssh security update",
    "tracking": {
      "current_release_date": "2026-11-12T10:49:58+00:00",
      "generator": {
        "date": "2026-11-12T10:49:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHSA-2026:99592",
      "initial_release_date": "2026-11-12T10:48:53+00:00",
      "revision_history": [
        {
          "date": "2026-11-12T10:48:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-12T10:48:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-12T10:49:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
                  "product_id": "AppStream-8.6.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
                  "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
                  "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debugsource@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-askpass-debuginfo@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-cavs-debuginfo@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients-debuginfo@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-debuginfo@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat-debuginfo@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-ldap-debuginfo@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server-debuginfo@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
                "product": {
                  "name": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
                  "product_id": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_ssh_agent_auth-debuginfo@0.10.3-7.15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-cavs@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-clients@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-keycat@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-ldap@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssh-server-0:8.0p1-15.el8_6.6.x86_64",
                "product": {
                  "name": "openssh-server-0:8.0p1-15.el8_6.6.x86_64",
                  "product_id": "openssh-server-0:8.0p1-15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh-server@8.0p1-15.el8_6.6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
                "product": {
                  "name": "pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
                  "product_id": "pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/pam_ssh_agent_auth@0.10.3-7.15.el8_6.6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssh-0:8.0p1-15.el8_6.6.src",
                "product": {
                  "name": "openssh-0:8.0p1-15.el8_6.6.src",
                  "product_id": "openssh-0:8.0p1-15.el8_6.6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssh@8.0p1-15.el8_6.6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        },
        "product_reference": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
          "product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        },
        "product_reference": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:8.0p1-15.el8_6.6.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src"
        },
        "product_reference": "openssh-0:8.0p1-15.el8_6.6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-cavs-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-ldap-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-server-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        },
        "product_reference": "pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        },
        "product_reference": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:8.0p1-15.el8_6.6.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src"
        },
        "product_reference": "openssh-0:8.0p1-15.el8_6.6.src",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-cavs-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-ldap-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-server-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64"
        },
        "product_reference": "openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        },
        "product_reference": "pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)",
          "product_id": "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        },
        "product_reference": "pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
        "relates_to_product_reference": "BaseOS-8.6.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "organization": "Aisle.com",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-55653",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "discovery_date": "2026-04-26T18:54:39+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2462351"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in OpenSSH affects clients operating in FIPS mode when negotiating Diffie-Hellman Group Exchange (DH-GEX) with a malicious SSH server. While it can lead to client process termination, resulting in a denial of service, the impact is limited to availability and does not result in broader system compromise. In order to exploit this vulnerability the attacker needs to trick the user to connect to an untrusted malicious server or compromise the server first. The availability impact is considered Low as the only impacted process is the single run of the SSH client trying to connect to the malicious server.\n\nThis vulnerability affects only the OpenSSH versions shipped with Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55653"
        },
        {
          "category": "external",
          "summary": "RHBZ#2462351",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462351"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55653",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55653"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55653",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55653"
        }
      ],
      "release_date": "2026-06-22T23:17:43.088000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, OpenSSH clients operating in FIPS mode should avoid negotiating the `diffie-hellman-group-exchange-sha256` key exchange algorithm. This can be achieved by explicitly listing allowed key exchange algorithms in the client\u0027s SSH configuration file (e.g., `/etc/ssh/ssh_config` or `~/.ssh/config`), ensuring `diffie-hellman-group-exchange-sha256` is *not* included. For example, to use a subset of common algorithms, you might configure:\n\n```\nKexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1\n```\n\n(Note: The above example `KexAlgorithms` list is illustrative and should be adjusted based on your environment\u0027s security requirements.)\n\nAdditionally, avoid using non-fatal client flows, such as `ssh-keyscan`, against untrusted SSH servers while FIPS mode is enabled. Changes to `ssh_config` will take effect for new SSH connections.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service"
    },
    {
      "acknowledgments": [
        {
          "organization": "Aisle.com",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-55655",
      "cwe": {
        "id": "CWE-923",
        "name": "Improper Restriction of Communication Channel to Intended Endpoints"
      },
      "discovery_date": "2026-04-26T18:39:13+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2462250"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a Moderate severity flaw. The OpenSSH client in Red Hat Enterprise Linux is vulnerable to a local man-in-the-middle attack on X11 forwarding connections. Exploitation requires an attacker to have local unprivileged access on the client system and for X11 forwarding to be explicitly enabled and in use, which is not a default configuration. The attack can compromise the confidentiality of forwarded X11 traffic. This vulnerability doesn\u0027t affect the upstream OpenSSH versions and is restricted to the versions as shipped with Red Hat Enterprise Linux.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55655"
        },
        {
          "category": "external",
          "summary": "RHBZ#2462250",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462250"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55655",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55655"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55655",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55655"
        }
      ],
      "release_date": "2026-06-22T23:22:11.127000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable X11 forwarding on OpenSSH clients when it is not required. This can be achieved by avoiding the use of `-X` or `-Y` options when invoking `ssh`, or by setting `ForwardX11 no` in the SSH client configuration file (`~/.ssh/config` or `/etc/ssh/ssh_config`). Disabling X11 forwarding will prevent the client from attempting to establish X11 connections, thereby removing the attack vector.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions"
    },
    {
      "cve": "CVE-2026-59995",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory"
      },
      "discovery_date": "2026-07-08T01:01:01.518880+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497927"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. The `sftp` client, when used to download files from a malicious server with the \u0027sftp server:/path .\u0027 command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or placing malicious files in sensitive directories on the client system, which could compromise system integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: OpenSSH: sftp client allows attacker to control downloaded file location",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59995"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497927",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497927"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59995",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59995"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59995",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59995"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.4p1",
          "url": "https://www.openssh.org/releasenotes.html#10.4p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
          "url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
        }
      ],
      "release_date": "2026-07-08T00:04:49.995000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid using the `sftp server:/path .` command when connecting to untrusted or potentially malicious SFTP servers. Exercise caution and verify the authenticity of SFTP servers before initiating file transfers, especially when using commands that implicitly define the download destination, and also avoid running SFTP sessions with elevated privileges (such as root).",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssh: OpenSSH: sftp client allows attacker to control downloaded file location"
    },
    {
      "cve": "CVE-2026-59999",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "discovery_date": "2026-07-08T01:01:55.619428+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497942"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `sshd`, the OpenSSH server daemon. When `DisableForwarding=yes` is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over `PermitTunnel=yes`. This allows a remote attacker to bypass intended security restrictions and establish a tunnel, potentially leading to unauthorized network access or circumvention of security policies, even when forwarding is explicitly disabled.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate severity flaw in OpenSSH `sshd` allows `PermitTunnel=yes` to override `DisableForwarding=yes`, potentially bypassing intended security controls. In Red Hat environments where `DisableForwarding` is used to restrict SSH session capabilities, an attacker who compromises a user\u0027s session could still establish a tunnel, leading to unauthorized network access or data exfiltration. This bypass occurs even when administrators explicitly attempt to prevent forwarding, though `PermitTunnel` is not enabled by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59999"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497942",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497942"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59999"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.4p1",
          "url": "https://www.openssh.org/releasenotes.html#10.4p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
          "url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
        }
      ],
      "release_date": "2026-07-08T00:13:08.397000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, if `DisableForwarding=yes` is set in `/etc/ssh/sshd_config` to prevent all forwarding, ensure that `PermitTunnel` is explicitly set to `no` in the same configuration file. This will enforce the intended security policy.\n\nAfter modifying `/etc/ssh/sshd_config`, restart the `sshd` service for the changes to take effect. This may temporarily interrupt active SSH sessions.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options"
    },
    {
      "cve": "CVE-2026-106553",
      "cwe": {
        "id": "CWE-459",
        "name": "Incomplete Cleanup"
      },
      "discovery_date": "2026-10-06T20:42:19.853034+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547191"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. When Generic Security Services Application Programming Interface (GSSAPI) authentication is enabled, the SSH daemon fails to properly discard credentials after a failed authentication attempt. If a user subsequently authenticates through another method, the leftover credentials can persist and become inappropriately accessible to that session. This issue allows an authenticated user to access lingering credentials, leading to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in OpenSSH where the sshd daemon fails to properly discard GSSAPI credentials after a failed authentication attempt when GSSAPIAuthentication is enabled. If a user subsequently authenticates through another method, the leftover credentials can persist and become inappropriately accessible to that session, allowing an authenticated local user to access lingering GSSAPI credentials and causing information disclosure. This affects the openssh package in Red Hat Hardened Images, where a fix is being pursued. Exploitation requires GSSAPI authentication to be enabled (it is disabled by default), a failed GSSAPI authentication attempt, and a subsequent successful authentication through another method; the impact is limited to confidentiality of the residual credentials, with no integrity or availability impact. Red Hat therefore rates this flaw LOW severity (CVSS 3.1 score 2.2), which differs significantly from the NIST score of 7.5: the NIST vector assumes a network-accessible, unauthenticated attack with high integrity impact, which is not supported by the technical evidence for this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106553"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547191",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547191"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106553",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106553"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106553",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106553"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.6",
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "release_date": "2026-10-06T20:25:45.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "Set GSSAPIAuthentication to no in the sshd configuration (e.g. /etc/ssh/sshd_config) and reload or restart the sshd service. This flaw only occurs when GSSAPI authentication is enabled, which is not the default configuration, so deployments that do not rely on GSSAPI authentication can disable it to prevent credentials from persisting after a failed authentication attempt. The upstream fix is included in OpenSSH 10.6; for the affected Red Hat Hardened Images package, apply the update once it becomes available through the product\u0027s update stream.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication"
    },
    {
      "cve": "CVE-2026-106582",
      "cwe": {
        "id": "CWE-205",
        "name": "Observable Behavioral Discrepancy"
      },
      "discovery_date": "2026-10-06T20:41:38.989493+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547181"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. When session compression is enabled, an attacker with access to a shared Secure Shell (SSH) connection can exploit the compression state shared across multiplexed channels. By analyzing changes in transmitted packet lengths caused by repeated data patterns, the attacker may deduce and recover sensitive plaintext information transmitted over concurrent channels in the same session.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: openssh: Information disclosure via shared compression side-channel",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A low severity information disclosure flaw was found in OpenSSH as included in Red Hat Hardened Images, where the openssh component is affected and a fix is being pursued through the product\u0027s delegated update process. When session compression is enabled, the LZ77 dictionary compression state is shared across all channels multiplexed over a single SSH connection. An attacker with the ability to send data over one channel of such a shared connection can perform a chosen-plaintext attack: because LZ77 replaces repeated strings with back-references into the shared search buffer, attacker-controlled input reflects measurably into the length of transmitted packets, allowing sensitive plaintext sent over a concurrent channel of the same session to be deduced and partially recovered. Exploitation requires session compression (a non-default option) to be enabled and trusted and untrusted traffic to be multiplexed over the same SSH connection, which limits practical exposure. Red Hat and upstream both assess this issue as low severity (CVSS 3.1 score 3.7).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106582"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547181",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547181"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106582",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106582"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106582",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106582"
        },
        {
          "category": "external",
          "summary": "https://arxiv.org/abs/2609.07709",
          "url": "https://arxiv.org/abs/2609.07709"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.6",
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "release_date": "2026-10-06T20:35:32.577000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "Session compression is not enabled by default in OpenSSH; keeping it disabled prevents this side-channel. Set \u0027Compression no\u0027 in sshd_config on servers and in ssh_config (or use \u0027ssh -o Compression=no\u0027) on clients where compression has been enabled. Avoid multiplexing trusted and untrusted traffic over a single shared SSH connection, for example via ssh connection multiplexing (ControlMaster). Where compression of transferred data is required, applying compression at the application level before data enters the SSH session is not affected by this type of attack. A fix is being pursued for the affected Red Hat Hardened Images product.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssh: openssh: Information disclosure via shared compression side-channel"
    },
    {
      "cve": "CVE-2026-106583",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command"
      },
      "discovery_date": "2026-10-06T23:50:58.683900+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547243"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. The OpenSSH client insufficiently sanitizes command-line usernames containing special characters, such as dollar signs and backslashes. When untrusted input is passed to the client command line, an attacker can exploit this issue to perform command injection through shell-evaluated options such as ProxyCommand, potentially leading to arbitrary command execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: openssh: Command injection via unvalidated command-line username",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity impact because successful exploitation permits arbitrary command execution within the security context of the user executing the OpenSSH client. Although the OpenSSH server daemon (sshd) is unaffected, the client utility is ubiquitously deployed across Red Hat Enterprise Linux and container environments for administrative and automation tasks. The flaw can only be triggered under specific operational conditions where scripts or wrapper applications pass untrusted external input into the destination username argument alongside shell-evaluated directives such as ProxyCommand.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106583"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547243",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547243"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106583",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106583"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106583",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106583"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.6",
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "release_date": "2026-10-06T23:42:14.374000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "openssh: openssh: Command injection via unvalidated command-line username"
    },
    {
      "cve": "CVE-2026-106585",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-10-06T21:01:42.912475+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2547200"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. A remote attacker can trigger a denial of service (DoS) or abnormal packet processing by transmitting crafted, highly compressed data to a vulnerable client or server. The application fails to verify that decompressed payloads remain within the maximum permitted packet length limits, allowing oversized packets to be processed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssh: openssh: Denial of service via oversized decompressed packets",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw of moderate impact was found in OpenSSH, where the sshd server and ssh client do not verify that decompressed payloads remain within the maximum supported packet length when processing highly compressed data. A remote attacker who requires no privileges or user interaction could send crafted, highly compressed data to a vulnerable client or server, causing oversized decompressed packets to be processed, which can result in a denial of service or abnormal packet processing. Within Red Hat\u0027s portfolio, the openssh component shipped in the Red Hat Hardened Images (Hummingbird) offering is affected, and a fix is being pursued through the delegated maintenance process for that product. Red Hat rates this flaw Moderate severity with a CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L), consistent with the upstream severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
        ],
        "known_not_affected": [
          "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
          "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-106585"
        },
        {
          "category": "external",
          "summary": "RHBZ#2547200",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547200"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-106585",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-106585"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-106585",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-106585"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.6",
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "release_date": "2026-10-06T20:52:39.850000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-12T10:48:53+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.Z.AUS:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "AppStream-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.AUS:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.AUS:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.src",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-askpass-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-cavs-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-clients-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-debugsource-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-keycat-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-ldap-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:openssh-server-debuginfo-0:8.0p1-15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-0:0.10.3-7.15.el8_6.6.x86_64",
            "BaseOS-8.6.0.Z.EUS.EXTENSION:pam_ssh_agent_auth-debuginfo-0:0.10.3-7.15.el8_6.6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssh: openssh: Denial of service via oversized decompressed packets"
    }
  ]
}

CVE-2026-106553 (GCVE-0-2026-106553)

Vulnerability from cvelistv5 – Published: 2026-10-06 20:25 – Updated: 2026-10-07 16:23

Summary

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.

Severity

2.2 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-07 16:22 UTC

CWE

CWE-669 - Incorrect Resource Transfer Between Spheres

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2159 records in the last 180 days details

References

1 reference

URL	Tags
https://www.openssh.org/releasenotes.html#10.6

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.6 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106553",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-07T16:22:41.442164Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-07T16:23:00.151Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-669",
              "description": "CWE-669 Incorrect Resource Transfer Between Spheres",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T20:25:45.854Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-106553",
    "datePublished": "2026-10-06T20:25:45.854Z",
    "dateReserved": "2026-10-06T20:25:45.450Z",
    "dateUpdated": "2026-10-07T16:23:00.151Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-106582 (GCVE-0-2026-106582)

Vulnerability from cvelistv5 – Published: 2026-10-06 20:35 – Updated: 2026-10-07 14:05

Summary

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-07 14:05 UTC

CWE

CWE-514 - Covert Channel

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2159 records in the last 180 days details

References

2 references

URL	Tags
https://www.openssh.org/releasenotes.html#10.6
https://arxiv.org/abs/2609.07709

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.6 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106582",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-07T14:05:18.589106Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-07T14:05:31.972Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 \"Crossing the Streams\" findings."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-514",
              "description": "CWE-514 Covert Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T20:35:32.577Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        },
        {
          "url": "https://arxiv.org/abs/2609.07709"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-106582",
    "datePublished": "2026-10-06T20:35:32.577Z",
    "dateReserved": "2026-10-06T20:35:32.203Z",
    "dateUpdated": "2026-10-07T14:05:31.972Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-106583 (GCVE-0-2026-106583)

Vulnerability from cvelistv5 – Published: 2026-10-06 23:42 – Updated: 2026-10-15 18:10

Summary

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

Severity

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:10 UTC

CWE

CWE-99 - Improper Control of Resource Identifiers ('Resource Injection')

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2159 records in the last 180 days details

References

1 reference

URL	Tags
https://www.openssh.org/releasenotes.html#10.6

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.6 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106583",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:10:54.270923Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:10:20.766Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In ssh in OpenSSH before 10.6, a $ or \\ character can occur in a command-line username, leading to injection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-99",
              "description": "CWE-99 Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T23:42:14.374Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-106583",
    "datePublished": "2026-10-06T23:42:14.374Z",
    "dateReserved": "2026-10-06T20:40:38.396Z",
    "dateUpdated": "2026-10-15T18:10:20.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-106585 (GCVE-0-2026-106585)

Vulnerability from cvelistv5 – Published: 2026-10-06 20:52 – Updated: 2026-10-15 18:10

Summary

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:10 UTC

CWE

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2159 records in the last 180 days details

References

1 reference

URL	Tags
https://www.openssh.org/releasenotes.html#10.6

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.6 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-106585",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:10:38.448263Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T18:10:26.186Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-409",
              "description": "CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T20:52:39.850Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openssh.org/releasenotes.html#10.6"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-106585",
    "datePublished": "2026-10-06T20:52:39.850Z",
    "dateReserved": "2026-10-06T20:52:39.482Z",
    "dateUpdated": "2026-10-15T18:10:26.186Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-55653 (GCVE-0-2026-55653)

Vulnerability from cvelistv5 – Published: 2026-06-23 03:36 – Updated: 2026-11-12 10:49

Title

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Summary

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-23 14:30 UTC

CWE

CWE-415 - Double Free

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1188 records in the last 180 days details

References

53 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:36759	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47755	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47756	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:58981	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76748	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:80513	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82749	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82750	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82751	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82752	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82753	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82755	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82756	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82758	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82759	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82763	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82897	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82898	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82899	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82900	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82901	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82902	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82904	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82907	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82908	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82909	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82912	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82913	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82914	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82915	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82916	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82917	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82918	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82920	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82921	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82923	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:89739	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:91232	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:95745	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:99573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:99592	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-55653	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2462351	issue-trackingx_refsource_REDHAT

Impacted products

57 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:9.9p1-25.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:9.9p1-7.el10_0.5 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:8.0p1-30.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:8.0p1-7.el8_4.3 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:8.0p1-7.el8_4.3 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:8.0p1-15.el8_6.6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:8.0p1-15.el8_6.6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:9.9p1-9.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:8.7p1-30.el9_2.13 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:8.7p1-38.el9_4.10 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4::appstream cpe:/o:redhat:rhel_e4s:9.4::baseos
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:8.7p1-45.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/o:redhat:rhel_eus:9.6::baseos
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 413.92.202611041925-0 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat Hardened Images	Unaffected: 10.3p1-6.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818590 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818589 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818505 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818496 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818502 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1793042072 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818602 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818598 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818512 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818587 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818778 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818782 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818627 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818790 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818874 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818792 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818662 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818877 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791883722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881612 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791885618 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881487 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881732 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791883315 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881486 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881769 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791885505 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819252 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791818749 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819206 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791818979 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819123 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791818901 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791820333 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819495 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819104 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1786435483 , < * (rpm) cpe:/a:redhat:rhui:5::el9

50 of 57 products shown. All of them on the page of CVE-2026-55653.

Date Public

2026-06-22 23:17

Credits

This issue was discovered by In partnership with Red Hat (Aisle.com).

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-55653",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-23T14:30:51.025049Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-23T14:31:00.827Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-25.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-7.el10_0.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-30.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-30.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-7.el8_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-7.el8_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-15.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-15.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-9.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-9.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream",
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.7p1-30.el9_2.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.4::appstream",
            "cpe:/o:redhat:rhel_e4s:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.7p1-38.el9_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream",
            "cpe:/o:redhat:rhel_eus:9.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.7p1-45.el9_6.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.13::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 4.13",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "413.92.202611041925-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "10.3p1-6.hum1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818590",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818589",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818505",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818496",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818502",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1793042072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818602",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818598",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818512",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818587",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818778",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818512",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818782",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-6.4-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818782",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-12.9-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818627",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-7.0-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818790",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818874",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-neuron-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818792",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-13.0-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818662",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818877",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-neuron-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791883722",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-12.9-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881612",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791885618",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-6.4-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881487",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881732",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-7.1-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791883315",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-gaudi-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881486",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881769",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-13.0-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791885505",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819252",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-gaudi-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818749",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819206",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-neuron-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818979",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-7.14-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819123",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818901",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rubin-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791820333",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-13.0-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819495",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-12.9-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819104",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/installer-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1786435483",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/rhua-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1786533529",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/installer-tp-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787135742",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/rhua-tp-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787241260",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:5"
          ],
          "defaultStatus": "affected",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 5",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by In partnership with Red Hat (Aisle.com)."
        }
      ],
      "datePublic": "2026-06-22T23:17:43.088Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS)."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-415",
              "description": "Double Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-12T10:49:33.660Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:36759",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:36759"
        },
        {
          "name": "RHSA-2026:47755",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:47755"
        },
        {
          "name": "RHSA-2026:47756",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:47756"
        },
        {
          "name": "RHSA-2026:47757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:47757"
        },
        {
          "name": "RHSA-2026:54387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:54387"
        },
        {
          "name": "RHSA-2026:58981",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "name": "RHSA-2026:76748",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:76748"
        },
        {
          "name": "RHSA-2026:76993",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:76993"
        },
        {
          "name": "RHSA-2026:80513",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:80513"
        },
        {
          "name": "RHSA-2026:82749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82749"
        },
        {
          "name": "RHSA-2026:82750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82750"
        },
        {
          "name": "RHSA-2026:82751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82751"
        },
        {
          "name": "RHSA-2026:82752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82752"
        },
        {
          "name": "RHSA-2026:82753",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82753"
        },
        {
          "name": "RHSA-2026:82754",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82754"
        },
        {
          "name": "RHSA-2026:82755",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82755"
        },
        {
          "name": "RHSA-2026:82756",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82756"
        },
        {
          "name": "RHSA-2026:82757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82757"
        },
        {
          "name": "RHSA-2026:82758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82758"
        },
        {
          "name": "RHSA-2026:82759",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82759"
        },
        {
          "name": "RHSA-2026:82761",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82761"
        },
        {
          "name": "RHSA-2026:82762",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82762"
        },
        {
          "name": "RHSA-2026:82763",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82763"
        },
        {
          "name": "RHSA-2026:82897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82897"
        },
        {
          "name": "RHSA-2026:82898",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82898"
        },
        {
          "name": "RHSA-2026:82899",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82899"
        },
        {
          "name": "RHSA-2026:82900",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82900"
        },
        {
          "name": "RHSA-2026:82901",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82901"
        },
        {
          "name": "RHSA-2026:82902",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82902"
        },
        {
          "name": "RHSA-2026:82903",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82903"
        },
        {
          "name": "RHSA-2026:82904",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82904"
        },
        {
          "name": "RHSA-2026:82907",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82907"
        },
        {
          "name": "RHSA-2026:82908",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82908"
        },
        {
          "name": "RHSA-2026:82909",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82909"
        },
        {
          "name": "RHSA-2026:82910",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82910"
        },
        {
          "name": "RHSA-2026:82912",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82912"
        },
        {
          "name": "RHSA-2026:82913",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82913"
        },
        {
          "name": "RHSA-2026:82914",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82914"
        },
        {
          "name": "RHSA-2026:82915",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82915"
        },
        {
          "name": "RHSA-2026:82916",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82916"
        },
        {
          "name": "RHSA-2026:82917",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82917"
        },
        {
          "name": "RHSA-2026:82918",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82918"
        },
        {
          "name": "RHSA-2026:82920",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82920"
        },
        {
          "name": "RHSA-2026:82921",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82921"
        },
        {
          "name": "RHSA-2026:82922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82922"
        },
        {
          "name": "RHSA-2026:82923",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82923"
        },
        {
          "name": "RHSA-2026:89739",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:89739"
        },
        {
          "name": "RHSA-2026:91232",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:91232"
        },
        {
          "name": "RHSA-2026:95745",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:95745"
        },
        {
          "name": "RHSA-2026:99573",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:99573"
        },
        {
          "name": "RHSA-2026:99592",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-55653"
        },
        {
          "name": "RHBZ#2462351",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462351"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-26T18:54:39.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-06-22T23:17:43.088Z",
          "value": "Made public."
        }
      ],
      "title": "Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, OpenSSH clients operating in FIPS mode should avoid negotiating the `diffie-hellman-group-exchange-sha256` key exchange algorithm. This can be achieved by explicitly listing allowed key exchange algorithms in the client\u0027s SSH configuration file (e.g., `/etc/ssh/ssh_config` or `~/.ssh/config`), ensuring `diffie-hellman-group-exchange-sha256` is *not* included. For example, to use a subset of common algorithms, you might configure:\n\n```\nKexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1\n```\n\n(Note: The above example `KexAlgorithms` list is illustrative and should be adjusted based on your environment\u0027s security requirements.)\n\nAdditionally, avoid using non-fatal client flows, such as `ssh-keyscan`, against untrusted SSH servers while FIPS mode is enabled. Changes to `ssh_config` will take effect for new SSH connections."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-415: Double Free"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-55653",
    "datePublished": "2026-06-23T03:36:22.741Z",
    "dateReserved": "2026-06-16T23:55:05.737Z",
    "dateUpdated": "2026-11-12T10:49:33.660Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-55655 (GCVE-0-2026-55655)

Vulnerability from cvelistv5 – Published: 2026-06-23 03:36 – Updated: 2026-11-12 10:49

Title

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

Summary

Severity

5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-23 12:21 UTC

CWE

CWE-923 - Improper Restriction of Communication Channel to Intended Endpoints

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1188 records in the last 180 days details

References

52 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:36759	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47755	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47756	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:47757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:54387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:58981	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76748	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76993	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:80513	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82749	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82750	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82751	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82752	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82753	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82754	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82755	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82756	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82757	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82758	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82759	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82763	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82897	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82898	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82899	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82900	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82901	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82902	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82903	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82904	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82907	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82908	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82909	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82910	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82912	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82913	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82914	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82915	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82916	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82917	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82918	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82920	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82921	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82922	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:82923	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:89739	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:91232	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:99573	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:99592	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-55655	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2462250	issue-trackingx_refsource_REDHAT

Impacted products

56 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:9.9p1-25.el10_2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:9.9p1-7.el10_0.5 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:8.0p1-30.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:8.0p1-7.el8_4.3 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:8.0p1-7.el8_4.3 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:8.0p1-15.el8_6.6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	Unaffected: 0:8.0p1-15.el8_6.6 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_eus_long_life:8.6::appstream cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:9.9p1-9.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:8.7p1-30.el9_2.13 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 0:8.7p1-38.el9_4.10 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4::appstream cpe:/o:redhat:rhel_e4s:9.4::baseos
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:8.7p1-45.el9_6.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/o:redhat:rhel_eus:9.6::baseos
Red Hat	Red Hat Hardened Images	Unaffected: 10.3p1-6.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818590 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818589 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818505 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818496 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1791818502 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.0	Unaffected: 1793042072 , < * (rpm) cpe:/a:redhat:openshift_ai:3.0::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818602 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818598 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818512 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818587 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.2	Unaffected: 1791818778 , < * (rpm) cpe:/a:redhat:openshift_ai:3.2::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818782 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818627 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818790 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818874 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818792 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818662 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1791818877 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791883722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881612 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791885618 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881487 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881732 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791883315 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881486 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791881769 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.4	Unaffected: 1791885505 , < * (rpm) cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819252 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791818749 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819206 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791818979 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819123 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791818901 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791820333 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819495 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat OpenShift AI 3.5	Unaffected: 1791819104 , < * (rpm) cpe:/a:redhat:openshift_ai:3.5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1786435483 , < * (rpm) cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1786533529 , < * (rpm) cpe:/a:redhat:rhui:5::el9

50 of 56 products shown. All of them on the page of CVE-2026-55655.

Date Public

2026-06-22 23:22

Credits

This issue was discovered by In partnership with Red Hat (Aisle.com).

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-55655",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-23T12:21:42.502865Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-23T12:21:47.865Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.2"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-25.el10_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-7.el10_0.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-30.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-30.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-7.el8_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-7.el8_4.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-15.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.0p1-15.el8_6.6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-9.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:9.9p1-9.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream",
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.7p1-30.el9_2.13",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.4::appstream",
            "cpe:/o:redhat:rhel_e4s:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.7p1-38.el9_4.10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream",
            "cpe:/o:redhat:rhel_eus:9.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:8.7p1-45.el9_6.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "10.3p1-6.hum1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818590",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818589",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818505",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818496",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818502",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.0::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.0",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1793042072",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818602",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818598",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818512",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818587",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818778",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-rhel9",
          "product": "Red Hat OpenShift AI 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818512",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818782",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-6.4-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818782",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-12.9-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818627",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-7.0-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818790",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818874",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-neuron-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818792",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-13.0-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818662",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818877",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-neuron-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791883722",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-12.9-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881612",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791885618",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-6.4-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881487",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881732",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-7.1-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791883315",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-gaudi-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881486",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791881769",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-13.0-rhel9",
          "product": "Red Hat OpenShift AI 3.4",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791885505",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-spyre-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819252",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-gaudi-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818749",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cpu-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819206",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-neuron-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818979",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rocm-7.14-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819123",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-tpu-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791818901",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-rubin-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791820333",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-13.0-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819495",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_ai:3.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhai/base-image-cuda-12.9-rhel9",
          "product": "Red Hat OpenShift AI 3.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1791819104",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/installer-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1786435483",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/rhua-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1786533529",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/installer-tp-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787135742",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/rhua-tp-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1787241260",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:6"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "openssh",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unknown",
          "packageName": "openshift/ose-rhel-coreos-8",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "unknown",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:5"
          ],
          "defaultStatus": "unknown",
          "packageName": "openshift/ose-rhel-coreos-9",
          "product": "Red Hat OpenShift Container Platform 5",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by In partnership with Red Hat (Aisle.com)."
        }
      ],
      "datePublic": "2026-06-22T23:22:11.127Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-923",
              "description": "Improper Restriction of Communication Channel to Intended Endpoints",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-12T10:49:37.057Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:36759",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:36759"
        },
        {
          "name": "RHSA-2026:47755",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:47755"
        },
        {
          "name": "RHSA-2026:47756",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:47756"
        },
        {
          "name": "RHSA-2026:47757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:47757"
        },
        {
          "name": "RHSA-2026:54387",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:54387"
        },
        {
          "name": "RHSA-2026:58981",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:58981"
        },
        {
          "name": "RHSA-2026:76748",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:76748"
        },
        {
          "name": "RHSA-2026:76993",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:76993"
        },
        {
          "name": "RHSA-2026:80513",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:80513"
        },
        {
          "name": "RHSA-2026:82749",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82749"
        },
        {
          "name": "RHSA-2026:82750",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82750"
        },
        {
          "name": "RHSA-2026:82751",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82751"
        },
        {
          "name": "RHSA-2026:82752",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82752"
        },
        {
          "name": "RHSA-2026:82753",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82753"
        },
        {
          "name": "RHSA-2026:82754",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82754"
        },
        {
          "name": "RHSA-2026:82755",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82755"
        },
        {
          "name": "RHSA-2026:82756",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82756"
        },
        {
          "name": "RHSA-2026:82757",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82757"
        },
        {
          "name": "RHSA-2026:82758",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82758"
        },
        {
          "name": "RHSA-2026:82759",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82759"
        },
        {
          "name": "RHSA-2026:82761",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82761"
        },
        {
          "name": "RHSA-2026:82762",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82762"
        },
        {
          "name": "RHSA-2026:82763",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82763"
        },
        {
          "name": "RHSA-2026:82897",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82897"
        },
        {
          "name": "RHSA-2026:82898",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82898"
        },
        {
          "name": "RHSA-2026:82899",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82899"
        },
        {
          "name": "RHSA-2026:82900",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82900"
        },
        {
          "name": "RHSA-2026:82901",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82901"
        },
        {
          "name": "RHSA-2026:82902",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82902"
        },
        {
          "name": "RHSA-2026:82903",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82903"
        },
        {
          "name": "RHSA-2026:82904",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82904"
        },
        {
          "name": "RHSA-2026:82907",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82907"
        },
        {
          "name": "RHSA-2026:82908",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82908"
        },
        {
          "name": "RHSA-2026:82909",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82909"
        },
        {
          "name": "RHSA-2026:82910",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82910"
        },
        {
          "name": "RHSA-2026:82912",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82912"
        },
        {
          "name": "RHSA-2026:82913",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82913"
        },
        {
          "name": "RHSA-2026:82914",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82914"
        },
        {
          "name": "RHSA-2026:82915",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82915"
        },
        {
          "name": "RHSA-2026:82916",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82916"
        },
        {
          "name": "RHSA-2026:82917",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82917"
        },
        {
          "name": "RHSA-2026:82918",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82918"
        },
        {
          "name": "RHSA-2026:82920",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82920"
        },
        {
          "name": "RHSA-2026:82921",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82921"
        },
        {
          "name": "RHSA-2026:82922",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82922"
        },
        {
          "name": "RHSA-2026:82923",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:82923"
        },
        {
          "name": "RHSA-2026:89739",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:89739"
        },
        {
          "name": "RHSA-2026:91232",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:91232"
        },
        {
          "name": "RHSA-2026:99573",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:99573"
        },
        {
          "name": "RHSA-2026:99592",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:99592"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-55655"
        },
        {
          "name": "RHBZ#2462250",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2462250"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-26T18:39:13.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-06-22T23:22:11.127Z",
          "value": "Made public."
        }
      ],
      "title": "Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions",
      "workarounds": [
        {
          "lang": "en",
          "value": "To mitigate this issue, disable X11 forwarding on OpenSSH clients when it is not required. This can be achieved by avoiding the use of `-X` or `-Y` options when invoking `ssh`, or by setting `ForwardX11 no` in the SSH client configuration file (`~/.ssh/config` or `/etc/ssh/ssh_config`). Disabling X11 forwarding will prevent the client from attempting to establish X11 connections, thereby removing the attack vector."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-923: Improper Restriction of Communication Channel to Intended Endpoints"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-55655",
    "datePublished": "2026-06-23T03:36:25.724Z",
    "dateReserved": "2026-06-16T23:55:05.737Z",
    "dateUpdated": "2026-11-12T10:49:37.057Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59995 (GCVE-0-2026-59995)

Vulnerability from cvelistv5 – Published: 2026-07-08 00:04 – Updated: 2026-07-08 12:52

Summary

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Severity

4.2 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-08 12:52 UTC

CWE

CWE-23 - Relative Path Traversal

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2159 records in the last 180 days details

References

3 references

URL	Tags
https://www.openwall.com/lists/oss-security/2026/…
https://marc.info/?l=openssh-unix-dev&m=178333966…
https://www.openssh.org/releasenotes.html#10.4p1

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.4 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59995",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T12:52:29.053569Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-08T12:52:35.500Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when \"sftp server:/path .\" is used with an attacker-controlled server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-23",
              "description": "CWE-23 Relative Path Traversal",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T00:04:49.995Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
        },
        {
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
        },
        {
          "url": "https://www.openssh.org/releasenotes.html#10.4p1"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-59995",
    "datePublished": "2026-07-08T00:04:49.995Z",
    "dateReserved": "2026-07-08T00:04:49.591Z",
    "dateUpdated": "2026-07-08T12:52:35.500Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59999 (GCVE-0-2026-59999)

Vulnerability from cvelistv5 – Published: 2026-07-08 00:13 – Updated: 2026-07-08 13:07

Summary

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-08 13:07 UTC

CWE

CWE-348 - Use of Less Trusted Source

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2159 records in the last 180 days details

References

3 references

URL	Tags
https://www.openwall.com/lists/oss-security/2026/…
https://marc.info/?l=openssh-unix-dev&m=178333966…
https://www.openssh.org/releasenotes.html#10.4p1

Impacted products

1 product

Vendor	Product	Version
OpenBSD	OpenSSH	Affected: 0 , < 10.4 (custom) cpe:2.3:a:openbsd:openssh::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59999",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-08T13:07:15.594672Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-08T13:07:51.541Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSH",
          "vendor": "OpenBSD",
          "versions": [
            {
              "lessThan": "10.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-348",
              "description": "CWE-348 Use of Less Trusted Source",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T00:13:08.397Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
        },
        {
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
        },
        {
          "url": "https://www.openssh.org/releasenotes.html#10.4p1"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-59999",
    "datePublished": "2026-07-08T00:13:08.397Z",
    "dateReserved": "2026-07-08T00:13:08.024Z",
    "dateUpdated": "2026-07-08T13:07:51.541Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:99592

CVE-2026-106553 (GCVE-0-2026-106553)

CVE-2026-106582 (GCVE-0-2026-106582)

CVE-2026-106583 (GCVE-0-2026-106583)

CVE-2026-106585 (GCVE-0-2026-106585)

CVE-2026-55653 (GCVE-0-2026-55653)

CVE-2026-55655 (GCVE-0-2026-55655)

CVE-2026-59995 (GCVE-0-2026-59995)

CVE-2026-59999 (GCVE-0-2026-59999)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour