Critical Security Flaw in OpenSSH Packages: Important Update Required
Summary
ALSA-2026:47757: Important: openssh security update. Affects openssh versions < 9.9p1-25.el10_2.alma.1. Fixed in 9.9p1-25.el10_2.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSH is a widely used implementation of the SSH protocol, providing secure encrypted communications over a computer network. It is essential for secure file transfers and remote server management. The OpenSSH suite includes the client, server, and related utilities, making it a critical component in many Linux and UNIX systems. However, recent vulnerabilities have been identified that could compromise the security of systems using affected versions.
Vulnerability Detail
The vulnerabilities in OpenSSH include a local Man-in-the-Middle (MITM) attack via abstract UNIX socket pre-binding, a double free error during FIPS known-group validation leading to denial of service, a heap out-of-bounds read due to missing NULL sentinel termination, a use-after-free vulnerability during host key re-exchange, and a file misplacement issue during remote copy operations. These vulnerabilities can lead to unauthorized access, service disruptions, and potential data breaches.
How To Fix
Minimum fixed version
9.9p1-25.el10_2.alma.1
This is the first release that contains the fix.
sudo dnf update opensshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can disable X11 forwarding in your SSH configuration to mitigate the risk of local MITM attacks. This can be done by editing the '/etc/ssh/sshd_config' file and setting 'X11Forwarding no'. After making changes, restart the SSH service with
sudo systemctl restart sshd'.
Conclusion
The identified vulnerabilities in OpenSSH pose significant risks to system security. It is essential to update to the latest patched versions of the affected packages to protect against potential exploits. Additionally, utilizing tools like Vulert can help monitor for vulnerabilities in your software ecosystem.
See every vulnerability recorded for openssh →
FAQ
OpenSSH is an open-source implementation of the SSH protocol, providing secure communication over unsecured networks.
The vulnerabilities can lead to unauthorized access, denial of service, and potential data breaches, compromising system integrity.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, temporarily disabling X11 forwarding can help mitigate the risk of local MITM attacks until you can apply the update.
It is recommended to regularly check for updates and apply them promptly to ensure your system remains secure.
Related vulnerabilities
Recent vulnerabilities recorded for openssh.
