Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:47756

Опубликовано: 30 июл. 2026
Источник: rocky
Оценка: Important

Описание

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)

  • openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

  • openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)

  • openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)

  • openssh: OpenSSH: scp file misplacement vulnerability during remote copy (CVE-2026-59996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
opensshaarch649.el9_8.rocky.0.1openssh-9.9p1-9.el9_8.rocky.0.1.aarch64.rpm
openssh-clientsaarch649.el9_8.rocky.0.1openssh-clients-9.9p1-9.el9_8.rocky.0.1.aarch64.rpm
openssh-keycataarch649.el9_8.rocky.0.1openssh-keycat-9.9p1-9.el9_8.rocky.0.1.aarch64.rpm
openssh-serveraarch649.el9_8.rocky.0.1openssh-server-9.9p1-9.el9_8.rocky.0.1.aarch64.rpm
opensshx86_649.el9_8.rocky.0.1openssh-9.9p1-9.el9_8.rocky.0.1.x86_64.rpm
openssh-clientsx86_649.el9_8.rocky.0.1openssh-clients-9.9p1-9.el9_8.rocky.0.1.x86_64.rpm
openssh-keycatx86_649.el9_8.rocky.0.1openssh-keycat-9.9p1-9.el9_8.rocky.0.1.x86_64.rpm
openssh-serverx86_649.el9_8.rocky.0.1openssh-server-9.9p1-9.el9_8.rocky.0.1.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-55653
CVE-2026-55654
CVE-2026-55655
CVE-2026-59996
CVE-2026-60002

Ссылки на источники

Исправления

Связанные уязвимости

rocky логотип

RLSA-2026:47757

rocky
3 дня назад

Important: openssh security update

oracle-oval логотип

ELSA-2026-47757

oracle-oval
4 дня назад

ELSA-2026-47757: openssh security update (IMPORTANT)

rocky логотип

RLSA-2026:47755

rocky
3 дня назад

Moderate: openssh security update

oracle-oval логотип

ELSA-2026-47755

oracle-oval
3 дня назад

ELSA-2026-47755: openssh security update (MODERATE)

ubuntu логотип

CVE-2026-55653

CVSS3: 4.3
ubuntu
около 1 месяца назад

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).