stable

openssh-10.2p1-12.fc44

FEDORA-2026-a80275b42d created by dbelyavs 4 days ago for Fedora 44

Improve GSS KEX algorithms documentation


  • CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service
  • CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator
  • CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-a80275b42d

This update has been submitted for testing by dbelyavs.

4 days ago

This update's test gating status has been changed to 'waiting'.

4 days ago

This update has obsoleted openssh-10.2p1-11.fc44, and has inherited its bugs and notes.

4 days ago

This update's test gating status has been changed to 'waiting'.

4 days ago

This update's test gating status has been changed to 'passed'.

4 days ago
karma

This update has been pushed to testing.

4 days ago
User Icon bojan commented & provided feedback 3 days ago
karma

Works.

This update can be pushed to stable now if the maintainer wishes

3 days ago
User Icon besser82 commented & provided feedback 3 days ago
karma

Works great! LGTM! =)

This update has been submitted for stable by bodhi.

3 days ago

This update has been pushed to stable.

3 days ago

Please log in to add feedback.

Metadata
Type
security
Severity
medium
Karma
3
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
4 days ago
in testing
4 days ago
in stable
3 days ago
approved
3 days ago
BZ#2241564 KexAlgorithms accepts gss-* algorithms in certain cases, but it is completely unclear what this does
0
0
BZ#2442505 0043-openssh-8.7p1-ssh-manpage.patch introduces duplicates in documentation
0
0

Automated Test Results

Test Cases

0 0 Test Case OpenSSH