Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
OpenSSH Security Update: Privilege Escalation and Bypass Risks
published 5 months ago
Summary
OpenSSH, a widely used SSH protocol implementation, has security issues that could allow attackers to escalate their privileges, bypass security checks, and access sensitive information. This affects Linux and UNIX operating systems. To ensure security, apply the latest update as soon as possible.
What to do
- Update almalinux openssh to version 9.9p1-23.el10_2.alma.1.
- Update almalinux openssh-askpass to version 9.9p1-23.el10_2.alma.1.
- Update almalinux openssh-clients to version 9.9p1-23.el10_2.alma.1.
- Update almalinux openssh-keycat to version 9.9p1-23.el10_2.alma.1.
- Update almalinux openssh-keysign to version 9.9p1-23.el10_2.alma.1.
- Update almalinux openssh-server to version 9.9p1-23.el10_2.alma.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:10 | almalinux | openssh |
< 9.9p1-23.el10_2.alma.1 Fix: upgrade to 9.9p1-23.el10_2.alma.1
|
| AlmaLinux:10 | almalinux | openssh-askpass |
< 9.9p1-23.el10_2.alma.1 Fix: upgrade to 9.9p1-23.el10_2.alma.1
|
| AlmaLinux:10 | almalinux | openssh-clients |
< 9.9p1-23.el10_2.alma.1 Fix: upgrade to 9.9p1-23.el10_2.alma.1
|
| AlmaLinux:10 | almalinux | openssh-keycat |
< 9.9p1-23.el10_2.alma.1 Fix: upgrade to 9.9p1-23.el10_2.alma.1
|
| AlmaLinux:10 | almalinux | openssh-keysign |
< 9.9p1-23.el10_2.alma.1 Fix: upgrade to 9.9p1-23.el10_2.alma.1
|
| AlmaLinux:10 | almalinux | openssh-server |
< 9.9p1-23.el10_2.alma.1 Fix: upgrade to 9.9p1-23.el10_2.alma.1
|
Original advisory text
Important: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.
Security Fix(es):
* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
* OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
* OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
* OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
* OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
* OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
* OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
* OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
* OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:19069 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-35385 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-35386 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-35387 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-35388 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-35414 Third Party Advisory
- https://bugzilla.redhat.com/2454469 Third Party Advisory
- https://bugzilla.redhat.com/2454490 Third Party Advisory
- https://bugzilla.redhat.com/2454494 Third Party Advisory
- https://bugzilla.redhat.com/2454500 Third Party Advisory
- https://bugzilla.redhat.com/2454506 Third Party Advisory
- https://errata.almalinux.org/10/ALSA-2026-19069.html Vendor Advisory
Timeline
Published19 May 2026
Updated26 May 2026
First seen26 May 2026
Sources
ALSA-2026:19069 · OSV
Track software like this
Free during beta