Red Hat Security Advisory

RHSA-2026:15893

openssh security update

Released 2026-05-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) openssh-askpass-8.0p1-15.el8_6.4
Red Hat Enterprise Linux AppStream E4S (v.8.6) openssh-askpass-8.0p1-15.el8_6.4
Red Hat Enterprise Linux AppStream TUS (v.8.6) openssh-askpass-8.0p1-15.el8_6.4
Red Hat Enterprise Linux BaseOS AUS (v.8.6) openssh-8.0p1-15.el8_6.4, openssh-cavs-8.0p1-15.el8_6.4, openssh-clients-8.0p1-15.el8_6.4 +4
Red Hat Enterprise Linux BaseOS E4S (v.8.6) openssh-8.0p1-15.el8_6.4, openssh-cavs-8.0p1-15.el8_6.4, openssh-clients-8.0p1-15.el8_6.4 +4
Red Hat Enterprise Linux BaseOS TUS (v.8.6) openssh-8.0p1-15.el8_6.4, openssh-cavs-8.0p1-15.el8_6.4, openssh-clients-8.0p1-15.el8_6.4 +4

TI-2026-03014 CVE-2026-3497 · GHSA-wcpp-3x59-h8vp

LOW 24

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.

CVSS 4.0LOW 2.7 Network No auth No interaction EPSS 0.02375 Published 2026-03-12 Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908