TI-2026-42784 CVE-2026-60002 · GHSA-gp5v-jg37-fvg6
Use after free in OpenBSD OpenSSH
Priority MEDIUM 42
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.
OpenShift Container Platform 4.21.35 bug fix and security update
Released 2026-09-29 · Red Hat rating Important · View on Red Hat →
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…