RHSA-2026:47757 Red Hat Enterprise Linux 10 OpenSSH Multiple Vulnerabilities Advisory

Vulnerability Overview Vulnerability ID: RHSA-2026:47757 Publication Date: 2026-07-29 Last Updated: 2026-07-29 Security Impact: Important CVSS Score: Specific numerical value not provided, but a detailed CVSS score is referenced. Scope of Impact Affected Systems: Red Hat Enterprise Linux 10 Affected Components: OpenSSH Client and Server Specific Vulnerabilities: - CVE-2026-55655: Local MITM (Man-in-the-Middle) attack on X11 forwarding via abstract UNIX socket pre-binding - CVE-2026-55653: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation - CVE-2026-55654: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination - CVE-2026-60002: Use-after-free vulnerability during host key re-exchange on the client side - CVE-2026-59996: File misplacement vulnerability during remote copy Remediation Remediation Measure: Provides secure update patches for OpenSSH Patch Analysis: Red Hat Lightspeed patch analysis View Affected Systems: Link provided to view affected systems POC Code or Exploit Code No specific POC code or exploit code is provided on the page. Summary This security advisory addresses multiple security vulnerabilities in the OpenSSH client and server within Red Hat Enterprise Linux 10, including local man-in-the-middle attacks, double free, heap out-of-bounds read, use-after-free, and file misplacement issues. Users are advised to apply the security update patches as soon as possible to remediate these vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

RHSA-2026:47757 Red Hat Enterprise Linux 10 OpenSSH Multiple Vulnerabilities Advisory

More from this source