Red Hat Product Errata RHSA-2026:47755 - Security Advisory Issued: 2026-07-29 Updated: 2026-07-29 RHSA-2026:47755 - Security Advisory Overview Updated Packages Synopsis Moderate: openssh security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions (CVE-2026-55655) openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2462250 - CVE-2026-55655 openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions BZ - 2462351 - CVE-2026-55653 openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service CVEs CVE-2026-55653 CVE-2026-55655 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM openssh-8.0p1-30.el8_10.src.rpm SHA-256: 46c7bde0bb6fb40c848c16b36ab4f46239d68dc64fdad10dbce1fb7d96469097 x86_64 openssh-8.0p1-30.el8_10.x86_64.rpm SHA-256: 62eb712706e61115febfe496648c5016974f2f5edaf1a9c34d11dcc6ccd79cd7 openssh-askpass-8.0p1-30.el8_10.x86_64.rpm SHA-256: b53303c0d1183554de50a755d37a5481a35d62e044ca703621816378978ab794 openssh-askpass-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 1bab1cffa582b0c533ab22e1c0fd30e003764230d94afd00550141c34006ec03 openssh-askpass-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 1bab1cffa582b0c533ab22e1c0fd30e003764230d94afd00550141c34006ec03 openssh-cavs-8.0p1-30.el8_10.x86_64.rpm SHA-256: ccf51606e1d35c6b9fa4c9bf564a02694be0287d50b531a4c9048b218807461a openssh-cavs-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: f1861f0804e7ebe9973565d36e1d6bcbddccc76951362e0dcb4a737e5bbb6b83 openssh-cavs-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: f1861f0804e7ebe9973565d36e1d6bcbddccc76951362e0dcb4a737e5bbb6b83 openssh-clients-8.0p1-30.el8_10.x86_64.rpm SHA-256: 73a53770beb99ceb67edca69eb3b1fd02ef45c81305ec9c2fb27e059a79e78bb openssh-clients-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 1590028fcbbf403d2cbe273960717ae1f27ad00375fa8f81d77c0dd64e63c541 openssh-clients-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 1590028fcbbf403d2cbe273960717ae1f27ad00375fa8f81d77c0dd64e63c541 openssh-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 97e2de3559603721f18937046436fcbe8634f33f924c19d458eb98a720e11af3 openssh-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 97e2de3559603721f18937046436fcbe8634f33f924c19d458eb98a720e11af3 openssh-debugsource-8.0p1-30.el8_10.x86_64.rpm SHA-256: ffa37bbd314508c00e583ec32a069338fc87f1cfcc68cc4e57e4efe397c8e38b openssh-debugsource-8.0p1-30.el8_10.x86_64.rpm SHA-256: ffa37bbd314508c00e583ec32a069338fc87f1cfcc68cc4e57e4efe397c8e38b openssh-keycat-8.0p1-30.el8_10.x86_64.rpm SHA-256: 6e7b23fb98986e9c73e83d58ffeb91c1ad18b0a9999a1c82d74ffee58cf35300 openssh-keycat-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 6b18bb1fa1d3b25001dff2b3e246f62d1bd8609fdfd7221581ab6a1ad81fd464 openssh-keycat-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 6b18bb1fa1d3b25001dff2b3e246f62d1bd8609fdfd7221581ab6a1ad81fd464 openssh-ldap-8.0p1-30.el8_10.x86_64.rpm SHA-256: 27bc8ad0aca9bf80b4d8efb67637c07e3ffafbfdf4406b1be56eafb50e7db0c0 openssh-ldap-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 691ef47a3f193a84afaca247e2de45b816ea0a7d47b22072fa368a1b85ad3fb2 openssh-ldap-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 691ef47a3f193a84afaca247e2de45b816ea0a7d47b22072fa368a1b85ad3fb2 openssh-server-8.0p1-30.el8_10.x86_64.rpm SHA-256: 90844ad456b950e6d8df52dd5d80ded7441ab604a07292715d883c3f21b92aff openssh-server-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 43f2619c17d5630c8290b8c97eaea34dfccc63985369abb1d326fca4b77da943 openssh-server-debuginfo-8.0p1-30.el8_10.x86_64.rpm SHA-256: 43f2619c17d5630c8290b8c97eaea34dfccc63985369abb1d326fca4b77da943 pam_ssh_agent_auth-0.10.3-7.30.el8_10.x86_64.rpm SHA-256: d632d55b2665fb993dbbfa946b0d1aa7dd5bdc0542e79ef2ca86e286fce85af0 pam_ssh_agent_auth-debuginfo-0.10.3-7.30.el8_10.x86_64.rpm SHA-256: 0671f1d31033dbc15315d8bfdeb9b5bedbda71b0ae08f2067c9ace7993714c8b pam_ssh_agent_auth-debuginfo-0.10.3-7.30.el8_10.x86_64.rpm SHA-256: 0671f1d31033dbc15315d8bfdeb9b5bedbda71b0ae08f2067c9ace7993714c8b Red Hat Enterprise Linux for IBM z Systems 8 SRPM openssh-8.0p1-30.el8_10.src.rpm SHA-256: 46c7bde0bb6fb40c848c16b36ab4f46239d68dc64fdad10dbce1fb7d96469097 s390x openssh-8.0p1-30.el8_10.s390x.rpm SHA-256: 9eb94120aa457d93523266fb7c87c483c70aa890eb0a2aa7cde78e877efb79b1 openssh-askpass-8.0p1-30.el8_10.s390x.rpm SHA-256: b418f2c982a2755590077c00c7621013340b2c6cf953e0d41873fd1d4d4d71f5 openssh-askpass-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: f77c6e07bb2cbe28a73fc12aa958367ca97c1b4dedb686d7af15ba2379c92b47 openssh-askpass-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: f77c6e07bb2cbe28a73fc12aa958367ca97c1b4dedb686d7af15ba2379c92b47 openssh-cavs-8.0p1-30.el8_10.s390x.rpm SHA-256: 4c467db35021260d7cde3c3cde41d906b94d84f67152962136861f93f87f195b openssh-cavs-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 1d08acfbb488bb0c2815107d19c41f7e4614b855719cff8939dd2d5cbf1aa64b openssh-cavs-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 1d08acfbb488bb0c2815107d19c41f7e4614b855719cff8939dd2d5cbf1aa64b openssh-clients-8.0p1-30.el8_10.s390x.rpm SHA-256: e846e1d2d9b1d20ee5e67149de2406f333425e40bef1a36d05364b5be8015ba3 openssh-clients-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 1f4a38278f248f3d998c5bdd87aea1e0d465211860ffed16d3de7997adc9b1b0 openssh-clients-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 1f4a38278f248f3d998c5bdd87aea1e0d465211860ffed16d3de7997adc9b1b0 openssh-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 28c6ca78bc72a039e8b8d39a92dd20c0aaf57efe24fd2b6a53ef722299fb24de openssh-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 28c6ca78bc72a039e8b8d39a92dd20c0aaf57efe24fd2b6a53ef722299fb24de openssh-debugsource-8.0p1-30.el8_10.s390x.rpm SHA-256: fd9a2a4638421f32f6f90736f955a27750a07dea41ef0d97e909f3296c89575a openssh-debugsource-8.0p1-30.el8_10.s390x.rpm SHA-256: fd9a2a4638421f32f6f90736f955a27750a07dea41ef0d97e909f3296c89575a openssh-keycat-8.0p1-30.el8_10.s390x.rpm SHA-256: da9c63e45e56b4f8be9f48ab38204f0b783325aa299e4609e2b38c10268d231e openssh-keycat-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: ac8eed1ba3d02f43d49edf8b577b8093b04635507ec3917f0b186673f2dd6743 openssh-keycat-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: ac8eed1ba3d02f43d49edf8b577b8093b04635507ec3917f0b186673f2dd6743 openssh-ldap-8.0p1-30.el8_10.s390x.rpm SHA-256: d9218f167dcce53e882c9af725de0ba19365f5cb0c6c11b4cb51a69ced419bbd openssh-ldap-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 6361fe021a834b3a31ae5958820df341f56d634a086beedf7a9adc4733a5e62f openssh-ldap-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 6361fe021a834b3a31ae5958820df341f56d634a086beedf7a9adc4733a5e62f openssh-server-8.0p1-30.el8_10.s390x.rpm SHA-256: d5a5c92d9c0836f780fec4b48f0e64160be521a4958bdbd487f5b5425e96367c openssh-server-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 2ee5cdd45e585398303f524bea2ca84cdea6a530ed3154bed8f75629585a6ed0 openssh-server-debuginfo-8.0p1-30.el8_10.s390x.rpm SHA-256: 2ee5cdd45e585398303f524bea2ca84cdea6a530ed3154bed8f75629585a6ed0 pam_ssh_agent_auth-0.10.3-7.30.el8_10.s390x.rpm SHA-256: 6d5853a64d03737fee4ae1a56c91c290a46e2925d8823fe1e048501727b11eee pam_ssh_agent_auth-debuginfo-0.10.3-7.30.el8_10.s390x.rpm SHA-256: bd27d9162e31501e68c2fc25e97e86c0f0d7071be88e4ffa69d75132916eafa3 pam_ssh_agent_auth-debuginfo-0.10.3-7.30.el8_10.s390x.rpm SHA-256: bd27d9162e31501e68c2fc25e97e86c0f0d7071be88e4ffa69d75132916eafa3 Red Hat Enterprise Linux for Power, little endian 8 SRPM openssh-8.0p1-30.el8_10.src.rpm SHA-256: 46c7bde0bb6fb40c848c16b36ab4f46239d68dc64fdad10dbce1fb7d96469097 ppc64le openssh-8.0p1-30.el8_10.ppc64le.rpm SHA-256: ab818906ee1b4dbec03223f9455d958b1cfeb01c32cda7cc63853a1cb1324432 openssh-askpass-8.0p1-30.el8_10.ppc64le.rpm SHA-256: 32dd38b281c763742475f95fee6156dc83c229a25d36386f16dafd4f4b2f1b9b openssh-askpass-debuginfo-8.0p1-30.el8_10.ppc64le.rpm SHA-256: fbfab7bbd34671815e09be01eb62856ababa9081b8bdd1f9403321ed7fc2d2c8 openssh-askpass-debuginfo-8.0p1-30.el8_10.ppc64le.rpm SHA-256: fbfab7bbd34671815e09be01eb62856ababa9081b8bdd1f9403321ed7fc2d2c8 openssh-c