A vulnerability (CVE-2026-3497) in OpenSSH's GSSAPI implementation allows information disclosure or denial of service due to uninitialized variables. The Red Hat security advisory rates this update as Important, but the article and provided NVD data do not specify a CVSS score, affected version ranges, or the exact fixed version number. The update is available for Red Hat Enterprise Linux 9.4 Extended Update Support and related variants, and administrators should apply the provided package updates according to the referenced solution article.
Red Hat Product Errata RHSA-2026:9732 - Security Advisory Issued: 2026-04-22 Updated: 2026-04-22 RHSA-2026:9732 - Security Advisory Overview Updated Packages Synopsis Important: openssh security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openssh is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64 Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2447085 - CVE-2026-3497 openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables CVEs CVE-2026-3497 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 SRPM openssh-8.7p1-38.el9_4.7.src.rpm SHA-256: d15e82f193e7d3e00f2d0fa6ac425c0daf00e976bbadc4013cdd9c4d8ec19d13 x86_64 openssh-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 80d00513befc5958c6109c908529a5f67f179f3a692267b4f1487d6a7ee3ab18 openssh-askpass-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: f1435421f1b41b22426f7d64cef7f71c22f4777b7bf93ffcaab8a08a1f833a8f openssh-askpass-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 42c167c2cf68c200bf43cdba475f0b6cecdc83a17f21ff944063684f6e2b01a2 openssh-askpass-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 42c167c2cf68c200bf43cdba475f0b6cecdc83a17f21ff944063684f6e2b01a2 openssh-clients-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: a493a1c9c1a885b8ac71b484d300fe613b3a1123e5bf22d09fda59dc3688d7f0 openssh-clients-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: a22b650e3dd0c75a034cc0180486172d5060b967b671e0b1b249e3affc20d4e8 openssh-clients-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: a22b650e3dd0c75a034cc0180486172d5060b967b671e0b1b249e3affc20d4e8 openssh-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2696513b0eff353704fc9e31022e98891a18f12e82ba840fa5e9d23d6cfee86e openssh-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2696513b0eff353704fc9e31022e98891a18f12e82ba840fa5e9d23d6cfee86e openssh-debugsource-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2e916041bc83892a6c1fe6d1db1835dddc68938da03c15e52e9cf3be19650e36 openssh-debugsource-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2e916041bc83892a6c1fe6d1db1835dddc68938da03c15e52e9cf3be19650e36 openssh-keycat-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: b1d9079b381bb646512aa2d562e8f433348f33e5fd7244400205c600d38997a0 openssh-keycat-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 24a91a04198dcd9865649d6d45efc62b233de435ba49cd565a0ba0899648857a openssh-keycat-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 24a91a04198dcd9865649d6d45efc62b233de435ba49cd565a0ba0899648857a openssh-server-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 3f6d0f7582a9759040f5af0193014ad32520e42cdfc574e879294c7604716a7f openssh-server-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 239a1552071cecf4dea20fc3ee523816c1082065f49f8120ccf571fdd55be31c openssh-server-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 239a1552071cecf4dea20fc3ee523816c1082065f49f8120ccf571fdd55be31c openssh-sk-dummy-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: c8da713ae19d7e5549019f4f4a0b1332e798742361b136f1e302c5714b80ce3b openssh-sk-dummy-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: c8da713ae19d7e5549019f4f4a0b1332e798742361b136f1e302c5714b80ce3b pam_ssh_agent_auth-0.10.4-5.38.el9_4.7.x86_64.rpm SHA-256: 1ead18d1a81bbf8283b4f78ff82f5524f4635c384251c96582b70ed073e4a007 pam_ssh_agent_auth-debuginfo-0.10.4-5.38.el9_4.7.x86_64.rpm SHA-256: 55829895ee5ece82c2057f0edc991512001c5028ce56c637e93d0db04019a2a0 pam_ssh_agent_auth-debuginfo-0.10.4-5.38.el9_4.7.x86_64.rpm SHA-256: 55829895ee5ece82c2057f0edc991512001c5028ce56c637e93d0db04019a2a0 Red Hat Enterprise Linux Server - AUS 9.4 SRPM openssh-8.7p1-38.el9_4.7.src.rpm SHA-256: d15e82f193e7d3e00f2d0fa6ac425c0daf00e976bbadc4013cdd9c4d8ec19d13 x86_64 openssh-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 80d00513befc5958c6109c908529a5f67f179f3a692267b4f1487d6a7ee3ab18 openssh-askpass-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: f1435421f1b41b22426f7d64cef7f71c22f4777b7bf93ffcaab8a08a1f833a8f openssh-askpass-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 42c167c2cf68c200bf43cdba475f0b6cecdc83a17f21ff944063684f6e2b01a2 openssh-askpass-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 42c167c2cf68c200bf43cdba475f0b6cecdc83a17f21ff944063684f6e2b01a2 openssh-clients-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: a493a1c9c1a885b8ac71b484d300fe613b3a1123e5bf22d09fda59dc3688d7f0 openssh-clients-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: a22b650e3dd0c75a034cc0180486172d5060b967b671e0b1b249e3affc20d4e8 openssh-clients-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: a22b650e3dd0c75a034cc0180486172d5060b967b671e0b1b249e3affc20d4e8 openssh-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2696513b0eff353704fc9e31022e98891a18f12e82ba840fa5e9d23d6cfee86e openssh-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2696513b0eff353704fc9e31022e98891a18f12e82ba840fa5e9d23d6cfee86e openssh-debugsource-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2e916041bc83892a6c1fe6d1db1835dddc68938da03c15e52e9cf3be19650e36 openssh-debugsource-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 2e916041bc83892a6c1fe6d1db1835dddc68938da03c15e52e9cf3be19650e36 openssh-keycat-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: b1d9079b381bb646512aa2d562e8f433348f33e5fd7244400205c600d38997a0 openssh-keycat-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 24a91a04198dcd9865649d6d45efc62b233de435ba49cd565a0ba0899648857a openssh-keycat-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 24a91a04198dcd9865649d6d45efc62b233de435ba49cd565a0ba0899648857a openssh-server-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 3f6d0f7582a9759040f5af0193014ad32520e42cdfc574e879294c7604716a7f openssh-server-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 239a1552071cecf4dea20fc3ee523816c1082065f49f8120ccf571fdd55be31c openssh-server-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: 239a1552071cecf4dea20fc3ee523816c1082065f49f8120ccf571fdd55be31c openssh-sk-dummy-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: c8da713ae19d7e5549019f4f4a0b1332e798742361b136f1e302c5714b80ce3b openssh-sk-dummy-debuginfo-8.7p1-38.el9_4.7.x86_64.rpm SHA-256: c8da713ae19d7e5549019f4f4a0b1332e798742361b136f1e302c5714b80ce3b pam_ssh_agent_auth-0.10.4-5.38.el9_4.7.x86_64.rpm SHA-256: 1ead18d1a81bbf8283b4f78ff82f5524f4635c384251c96582b70ed073e4a007 pam_ssh_agent_auth-debuginfo-0.10.4-5.38.el9_4.7.x86_64.rpm SHA-256: 55829895ee5ece82c2057f0edc991512001c5028ce56c637e93d0db04019a2a0 pam_ssh_agent_auth-debuginfo-0.10.4-5.38.el9_4.7.x86_64.rpm SHA-256: 55829895ee5ece82c2057f0edc991512001c5028ce56c637e93d0db04019a2a0 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 SRPM openssh-8.7p1-38.el9_4.7.src.rpm SHA-256: d15e82f193e7d3e00f2d0fa6ac425c0daf00e976bbadc4013cdd9c4d8ec19d13 s390x openssh-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 22a7ffe2144c193160e8a1afd37a7fb53925ab96067dfc44e432902321137dfb openssh-askpass-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 0b58c219d3a85ed470f4d31529d839b9ccd9751e3bdd8fd36257fe79947f84b1 openssh-askpass-debuginfo-8.7p1-38.el9_4.7.s390x.rpm SHA-256: d5e37ba40f05821fa6ac1d0a2de0c28023339959d23dd75a3ac192e3c557e77e openssh-askpass-debuginfo-8.7p1-38.el9_4.7.s390x.rpm SHA-256: d5e37ba40f05821fa6ac1d0a2de0c28023339959d23dd75a3ac192e3c557e77e openssh-clients-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 5de6c0c72bce20b5d41f7d6d17544801676c578ddac74852a4f8d838be6e77cb openssh-clients-debuginfo-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 0781263872eaf7353891ec98ed0b8c0673824f6a3bf536b38c29e77f038ec0a5 openssh-clients-debuginfo-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 0781263872eaf7353891ec98ed0b8c0673824f6a3bf536b38c29e77f038ec0a5 openssh-debuginfo-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 582ca28e2deae4e49ace6ee19161d9f743d12dcdaf6cb9472963d3e2b5adce71 openssh-debuginfo-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 582ca28e2deae4e49ace6ee19161d9f743d12dcdaf6cb9472963d3e2b5adce71 openssh-debugsource-8.7p1-38.el9_4.7.s390x.rpm SHA-256: 11c11e2faa23c51859224a4b86fbb3b073d87a807bbfaed1e1ef542da95f6b91 openssh-debugsource-8.7p1-38.el9_4.7.s39