Red Hat Security AdvisoryRHSA-2026:5475
Red Hat Hardened Images RPM Release
Released 2026-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images openssh-10.2p1-9.hum1@aarch64, openssh-10.2p1-9.hum1@src, openssh-10.2p1-9.hum1@x86_64 +12
Fixes 3 records
Priority MEDIUM 52
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used.
CVSS 3.1LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00463 · Published 2025-10-06 · Partial fix · 10.1 CWE-159
Priority LOW 24
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.02375 · Published 2026-03-12 · Partial fix · 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15 +1 CWE-908
Priority LOW 16
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
CVSS 3.1LOW 3.6· Local · Low privileges · No interaction · EPSS 0.00125 · Published 2025-10-06 · Partial fix · 10.1 CWE-158
