12 matches found
AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776428482)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776428482 advisory. - OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or...
Rocky Linux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776444688)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776444688 advisory. - OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or...
Astra Linux – Vulnerability in OpenSSH
OpenSSH versions prior to 10.3 omitted the confirmation of connection multiplexing for proxy-mode multiplexing sessions...
NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2026-0101)
The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities: - ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re- exchange. This outcome occurs only on the client side...
Allocation of Resources Without Limits or Throttling
Overview github.com/golang/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in its connection multiplexing, reached through Dial, NewClientConn, NewControlClientConn, and NewServerConn, which buffers...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to OpenSSH
Summary OpenSSH is used by IBM Integrated Analytics System as a suite of secure networking utilities for encrypted communications. Multiple vulnerabilities affect OpenSSH versions prior to 10.3. CVE-2026-35385 involves improper preservation of file permissions where a file downloaded via scp usin...
openssh security update
8.0p1-29.0.1 - Update upstream references Orabug: 36587718 8.0p1-29 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves:...
EUVD-2026-18404
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions...
AZL-81785 CVE-2026-35388 affecting package openssh for versions less than 9.8p1-6
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions...
CVE-2026-35388
OpenSSH (before 10.3) is affected by a vulnerability in proxy-mode multiplexing where the system omits connection multiplexing confirmation for multiplexing sessions. The issue is tied to OpenSSH’s proxy-mode multiplexing behavior and is described as a flaw in the handling of multiplexing confirm...
