sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
Red Hat AI Base Images 3.2.5 (ROCm 6.4)
Released 2026-10-14 · Red Hat rating Important · View on Red Hat →
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.
A flaw was found in OpenSSH.
A flaw was found in OpenSSH.
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.