Red Hat Security Advisory

RHSA-2025:6993

openssh security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) openssh-askpass-8.7p1-45.el9, pam_ssh_agent_auth-0.10.4-5.45.el9
Red Hat Enterprise Linux BaseOS (v. 9) openssh-8.7p1-45.el9, openssh-clients-8.7p1-45.el9, openssh-keycat-8.7p1-45.el9 +1

TI-2025-19413 CVE-2025-26465 · GHSA-jrwv-mv4h-7rrq

HIGH 65

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.07723 Published 2025-02-18 Partial fix · 8.0p1-26.el8_10, 8.7p1-45.el9 +2 CWE-390

TI-2025-19414 CVE-2025-26466 · GHSA-m92w-x6j2-5gc5

MEDIUM 60

A flaw was found in the OpenSSH package.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.38682 Published 2025-02-28 Fixed in 9.9p1-7.el10_0, 8.7p1-45.el9 CWE-770