TI-2026-42783 CVE-2026-60001 · GHSA-8pmr-cc7f-4v7w
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
Priority LOW 35
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
RHSA-2026:88211
openssh security update
Released 2026-10-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-34.el8_10
- Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-34.el8_10, openssh-cavs-8.0p1-34.el8_10, openssh-clients-8.0p1-34.el8_10 +4
Fixes 5 records
TI-2026-42782 CVE-2026-60000 · GHSA-76jm-35gr-hwcm
Resource allocation without limits in OpenBSD OpenSSH
Priority LOW 34
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
TI-2026-42780 CVE-2026-59998 · GHSA-3j2g-cqmq-cjw9
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior…
Priority LOW 28
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
TI-2026-42779 CVE-2026-59997 · GHSA-56r6-6mmg-25j5
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line…
Priority LOW 24
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an…
TI-2026-51408 CVE-2026-73283 · GHSA-97p6-qxmv-h7jm
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to…
Priority LOW 12
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.