stable

opkssh-0.15.0-2.el10_3

FEDORA-EPEL-2026-229e7ad5a2 created by thofmann 2 months ago for Fedora EPEL 10.3

Update to opkssh 0.15.0.

This release fixes several CVEs in bundled/vendored dependencies:

  • CVE-2026-39835: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate
  • CVE-2026-39833: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation
  • CVE-2026-27145: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (fixed via the Go toolchain used to build this package)

This update has been submitted for testing by thofmann.

2 months ago

This update's test gating status has been changed to 'ignored'.

2 months ago

This update has been pushed to testing.

2 months ago
User Icon derekenz commented & provided feedback 2 months ago
karma

Works

This update can be pushed to stable now if the maintainer wishes

2 months ago
User Icon geraldosimiao provided feedback 2 months ago
karma

This update has been submitted for stable by thofmann.

2 months ago

This update has been pushed to stable.

2 months ago

Please log in to add feedback.

Metadata
Type
security
Severity
medium
Karma
2
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
2 months ago
in testing
2 months ago
in stable
2 months ago
approved
2 months ago
Builds
1
opkssh-0.15.0-2.el10_3
BZ#2493483 CVE-2026-39835 opkssh: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate [epel-all]
0
0
BZ#2494249 CVE-2026-27145 opkssh: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [epel-all]
0
0
BZ#2494448 CVE-2026-39833 opkssh: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation [epel-all]
0
0
opkssh-0.15.0-2.el10_3

Automated Test Results

Copyright © 2007-2026 Red Hat, Inc. and others.

Running bodhi-server 26.4.0 on bodhi-web-7dd4cfcc55-hkfdh.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •