FEDORA-2026-a2c682a975 — security update for openssh

obsolete

FEDORA-2026-a2c682a975 created by zfridric a month ago for Fedora 44

CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service
CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator
CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding

This update has been submitted for testing by zfridric.

This update's test gating status has been changed to 'waiting'.

This update has been obsoleted by openssh-10.2p1-12.fc44.

This update's test gating status has been changed to 'passed'.

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

a month ago

Builds

BZ#2442505 0043-openssh-8.7p1-ssh-manpage.patch introduces duplicates in documentation

openssh-10.2p1-11.fc44

passed


0	0	Test Case OpenSSH