Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.2
OpenSSH Server on Red Hat Systems at Risk of Unauthorized Access
published 6 months ago
Summary
A security update is available for OpenSSH, which is used to connect to and manage Red Hat systems remotely. If not applied, this update could allow an attacker to gain unauthorized access to your system. You should update your OpenSSH server as soon as possible to ensure the security of your system and data.
What to do
- Update redhat openssh to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-askpass to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-cavs to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-cavs-debuginfo to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-clients to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-clients-debuginfo to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-debuginfo to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-debugsource to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-keycat to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-keycat-debuginfo to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-ldap to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-ldap-debuginfo to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-server to version 0:8.0p1-20.el8_8.3.
- Update redhat openssh-server-debuginfo to version 0:8.0p1-20.el8_8.3.
- Update redhat pam_ssh_agent_auth to version 0:0.10.3-7.20.el8_8.3.
- Update redhat pam_ssh_agent_auth-debuginfo to version 0:0.10.3-7.20.el8_8.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-askpass |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-cavs |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-cavs-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-clients |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-clients-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-debugsource |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-keycat |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-keycat-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-ldap |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-ldap-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-server |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | openssh-server-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | pam_ssh_agent_auth |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | pam_ssh_agent_auth-debuginfo |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-askpass |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-cavs |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-cavs-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-clients |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-clients-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-debugsource |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-keycat |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-keycat-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-ldap |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-ldap-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-server |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | openssh-server-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | pam_ssh_agent_auth |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
| Red Hat:rhel_tus:8.8::appstream | redhat | pam_ssh_agent_auth-debuginfo |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-askpass |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-cavs |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-cavs-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-clients |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-clients-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-debugsource |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-keycat |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-keycat-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-ldap |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-ldap-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-server |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | openssh-server-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | pam_ssh_agent_auth |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
| Red Hat:rhel_e4s:8.8::baseos | redhat | pam_ssh_agent_auth-debuginfo |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-askpass |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
Showing 50 of 64. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-cavs |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-cavs-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-clients |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-clients-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-debugsource |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-keycat |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-keycat-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-ldap |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-ldap-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-server |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | openssh-server-debuginfo |
< 0:8.0p1-20.el8_8.3 Fix: upgrade to 0:8.0p1-20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | pam_ssh_agent_auth |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
| Red Hat:rhel_tus:8.8::baseos | redhat | pam_ssh_agent_auth-debuginfo |
< 0:0.10.3-7.20.el8_8.3 Fix: upgrade to 0:0.10.3-7.20.el8_8.3
|
Original advisory text
Red Hat Security Advisory: openssh security update
References
- https://access.redhat.com/errata/RHSA-2026:14924 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2447085 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14924.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-3497 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-3497 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3497 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-3497 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/03/12/3 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published8 May 2026
Updated9 May 2026
First seen9 May 2026
Sources
RHSA-2026:14924 · OSV
Track software like this
Free during beta