Critical Security Flaw in OpenSSH: Multiple Vulnerabilities Affecting Rocky Linux
Summary
RLSA-2026:47756: Important: openssh security update. Affects openssh versions < 0:9.9p1-9.el9_8.rocky.0.1. Fixed in 0:9.9p1-9.el9_8.rocky.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSH is a widely used implementation of the SSH protocol, essential for secure remote login and file transfer across various operating systems, including Linux and UNIX. It provides both client and server functionalities, enabling secure communication over potentially insecure networks. The recent vulnerabilities identified in OpenSSH versions for Rocky Linux pose significant risks, including denial of service and unauthorized access through various attack vectors.
Vulnerability Detail
The vulnerabilities in OpenSSH for Rocky Linux include a local MITM attack on X11 forwarding, a double free issue during FIPS validation leading to denial of service, a heap out-of-bounds read due to missing NULL sentinel termination, a use-after-free vulnerability during host key re-exchange, and a file misplacement issue during remote copy operations. These vulnerabilities could allow attackers to exploit the system, potentially leading to unauthorized access or service disruption.
How To Fix
Minimum fixed version
0:9.9p1-9.el9_8.rocky.0.1
This is the first release that contains the fix.
sudo dnf update opensshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider disabling X11 forwarding in your SSH configuration or using alternative secure methods for file transfer instead of 'scp' until the package is updated.
Conclusion
The vulnerabilities identified in OpenSSH for Rocky Linux present serious security risks that can lead to unauthorized access and denial of service. It is crucial to update to the latest patched version to ensure the security of your systems. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for openssh →
FAQ
The main vulnerabilities include local MITM attacks, double free issues, heap out-of-bounds reads, use-after-free vulnerabilities, and file misplacement during remote copy operations.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
The CVSS score for the vulnerabilities in OpenSSH is 7.7, indicating a high severity level.
You can update OpenSSH by running the command 'sudo dnf update openssh' in your terminal.
If immediate updates are not possible, consider disabling X11 forwarding and using alternative secure methods for file transfers to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for openssh.
