Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

openssh-clients-9.9p1-29.el10_2.alma.1 RPM for ppc64le

From AlmaLinux 10.2 BaseOS for ppc64le

Name: openssh-clients Distribution: AlmaLinux
Version: 9.9p1 Vendor: AlmaLinux
Release: 29.el10_2.alma.1 Build date: Tue Oct 20 13:36:56 2026
Group: Unspecified Build host: ppc64le-builder02.almalinux.org
Size: 3342094 Source RPM: openssh-9.9p1-29.el10_2.alma.1.src.rpm
Packager: AlmaLinux Packaging Team <packager@almalinux.org>
Url: http://www.openssh.com/portable.html
Summary: An open source SSH client applications
 
OpenSSH is a free version of SSH (Secure SHell), a program for logging
into and executing commands on a remote machine. This package includes
the clients necessary to make encrypted connections to SSH servers.

Provides

Requires

License

BSD-3-Clause AND BSD-2-Clause AND ISC AND SSH-OpenSSH AND ssh-keyscan AND sprintf AND LicenseRef-Fedora-Public-Domain AND X11-distribute-modifications-variant

Changelog

* Tue Oct 20 2026 Koichiro Iwao <meta@almalinux.org> - 9.9p1-29.alma.1
  - Unpatch Red Hat help message
* Thu Oct 08 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-29
  - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck
    Resolves: RHEL-276225
  - CVE-2026-59997: Fix internal-sftp server argument parsing limit
    Resolves: RHEL-276232
  - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts
    Resolves: RHEL-276227
* Mon Sep 21 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-28
  - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
    authentication where the minimum per-attempt delay was not being enforced
    Resolves: RHEL-258463
* Fri Aug 21 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-27
  - CVE-2026-73283: Complete the fix of security bypass due to incorrect
    handling of forwarding and tunneling options
    Resolves: RHEL-245413
  - CVE-2026-73281: Fix misinteraction between agent locking and
    the session-bind@openssh.com extension
    Resolves: RHEL-245423
  - CVE-2026-73282: Fix information disclosure and data corruption
    via use-after-free in ssh client
    Resolves: RHEL-245418
* Wed Aug 12 2026 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-26
  - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded
    file location
    Resolves: RHEL-236314
  - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect
    handling of forwarding and tunneling options
    Resolves: RHEL-236288
* Tue Jul 14 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-25
  - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
    in unintended parent directories when scp performs remote-to-remote copy
    via the local host
    Resolves: RHEL-193170
  - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
    Resolves: RHEL-193016
* Tue Jun 30 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-24
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
    Resolves: RHEL-186435
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
    Resolves: RHEL-185826
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
    Resolves: RHEL-185852
* Mon Apr 13 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-23
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164739
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166238
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166222
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166190
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166206
* Thu Mar 26 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-22
  - Version bump
* Mon Mar 16 2026 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-21
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155812
* Wed Feb 25 2026 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-20
  - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
    Resolves: RHEL-151579
* Thu Dec 11 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-19
  - Support of hybrid MLKEM key exchange methods in FIPS mode
    Resolves: RHEL-125929
* Fri Dec 05 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-18
  - Adding a mechanism to disable GSSAPIDelegateCredentials in sshd_config
    Resolves: RHEL-5281
* Fri Dec 05 2025 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-17
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128399
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128388
* Mon Nov 03 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-16
  - Implement mlkem768nistp256-sha256 and mlkem1024nistp384-sha384 KEX methods
    Resolves: RHEL-70824
* Mon Oct 27 2025 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440
* Mon Sep 15 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-14
  - Relax GSS Kex restriction in FIPS mode
    Resolves: RHEL-91181
* Mon Sep 01 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-13
  - Allow non-cryptographical use of MD5 in GSS Kex in FIPS mode
    Related: RHEL-91181
* Mon Aug 04 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-12
  - Relax GSS Kex restriction in FIPS mode
    Resolves: RHEL-91181
* Fri Jul 18 2025 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-11
  - Move the redhat help message to debug1 log level
    Resolves: RHEL-93957
* Thu Jun 26 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-10
  - Support for authentication indicators in OpenSSH
    Resolves: RHEL-40790
* Tue Apr 29 2025 Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644
* Thu Mar 20 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816
* Tue Feb 18 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-7
  - rebuilt
    Related: RHEL-78699
* Thu Feb 13 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-6
  - Fix regression of Match directive processing
    Related: RHEL-76317
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465, CVE-2025-26466).
    Resolves: RHEL-78699
    Resolves: RHEL-78943
* Mon Jan 27 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-5
  - Fix regression of Match directive processing
    Resolves: RHEL-76317
  - Avoid linking issues for openssl logging
    Related: RHEL-63190
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 9.9p1-4.1
  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018
* Mon Oct 28 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-4
  - Fix MLKEM for BE platforms
    Related: RHEL-60564

Files

/etc/ssh/ssh_config
/etc/ssh/ssh_config.d
/etc/ssh/ssh_config.d/50-redhat.conf
/usr/bin/scp
/usr/bin/sftp
/usr/bin/ssh
/usr/bin/ssh-add
/usr/bin/ssh-agent
/usr/bin/ssh-copy-id
/usr/bin/ssh-keyscan
/usr/lib/.build-id
/usr/lib/.build-id/21
/usr/lib/.build-id/21/08691b7ee1ca5be1eaa4366200a03f0fd4172e
/usr/lib/.build-id/2d
/usr/lib/.build-id/2d/36a51be1a1e2f26cb6474cbafe832d46e638ff
/usr/lib/.build-id/2e
/usr/lib/.build-id/2e/3481344279300f7205c286bf15c4ddc171fff1
/usr/lib/.build-id/35
/usr/lib/.build-id/35/f77b4c20928757420ec5d8abe90b7698c18984
/usr/lib/.build-id/71
/usr/lib/.build-id/71/6472431b5746fd95e815ec89f29ced2d6e530e
/usr/lib/.build-id/74
/usr/lib/.build-id/74/859f23e7e3f65b6928694f16fcadd493f3d656
/usr/lib/.build-id/a8
/usr/lib/.build-id/a8/82a78de82e2c828b49d35bf7977875ed4bcfd5
/usr/lib/.build-id/dd
/usr/lib/.build-id/dd/e63388d51c350bd4a60ca757700719d8f89004
/usr/lib/systemd/user/ssh-agent.service
/usr/lib/systemd/user/ssh-agent.socket
/usr/libexec/openssh/ssh-pkcs11-helper
/usr/libexec/openssh/ssh-sk-helper
/usr/share/man/man1/scp.1.gz
/usr/share/man/man1/sftp.1.gz
/usr/share/man/man1/ssh-add.1.gz
/usr/share/man/man1/ssh-agent.1.gz
/usr/share/man/man1/ssh-copy-id.1.gz
/usr/share/man/man1/ssh-keyscan.1.gz
/usr/share/man/man1/ssh.1.gz
/usr/share/man/man5/ssh_config.5.gz
/usr/share/man/man8/ssh-pkcs11-helper.8.gz
/usr/share/man/man8/ssh-sk-helper.8.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Oct 26 09:21:52 2026