Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Rocky Linux 10: openssh X11 Forwarding and Agent Forwarding Risk

published 5 months ago

Summary

OpenSSH, a tool for secure remote access, contains a flaw that could allow unauthorized access to your system. This affects Linux and UNIX systems, including Rocky Linux 10. It's essential to update your system to fix this issue and prevent potential security risks. You should apply the latest security update as soon as possible.

What to do

Update rocky openssh to version 0:9.9p1-11.el10.rocky.0.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Rocky Linux:10	rocky	openssh	< 0:9.9p1-11.el10.rocky.0.1 Fix: upgrade to 0:9.9p1-11.el10.rocky.0.1

Original advisory text

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding (CVE-2025-32728)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

References

https://errata.rockylinux.org/RLSA-2025:20126 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2358767 Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

4.3 Medium

Timeline

Published21 May 2026

Updated21 May 2026

First seen21 May 2026

Sources

RLSA-2025:20126 · OSV

Track software like this

Free during beta