Issued at: 2026-04-09
Updated at: 2026-04-10
Synopsis
Important: openssh security update
Description
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.
Security Fix(es):
* openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 8 aarch64
Rocky Linux 8 x86_64
Fixes
2447085
CVEs
CVE-2026-3497
Affected packages
Rocky Linux 8 aarch64 - BaseOS
openssh-0:8.0p1-28.el8_10.aarch64.rpm
openssh-0:8.0p1-28.el8_10.src.rpm
openssh-cavs-0:8.0p1-28.el8_10.aarch64.rpm
openssh-cavs-debuginfo-0:8.0p1-28.el8_10.aarch64.rpm
openssh-clients-0:8.0p1-28.el8_10.aarch64.rpm
openssh-clients-debuginfo-0:8.0p1-28.el8_10.aarch64.rpm
openssh-debuginfo-0:8.0p1-28.el8_10.aarch64.rpm
openssh-debugsource-0:8.0p1-28.el8_10.aarch64.rpm
openssh-keycat-0:8.0p1-28.el8_10.aarch64.rpm
openssh-keycat-debuginfo-0:8.0p1-28.el8_10.aarch64.rpm
openssh-ldap-0:8.0p1-28.el8_10.aarch64.rpm
openssh-ldap-debuginfo-0:8.0p1-28.el8_10.aarch64.rpm
openssh-server-0:8.0p1-28.el8_10.aarch64.rpm
openssh-server-debuginfo-0:8.0p1-28.el8_10.aarch64.rpm
pam_ssh_agent_auth-0:0.10.3-7.28.el8_10.aarch64.rpm
pam_ssh_agent_auth-debuginfo-0:0.10.3-7.28.el8_10.aarch64.rpm
Rocky Linux 8 x86_64 - BaseOS
openssh-0:8.0p1-28.el8_10.src.rpm
openssh-0:8.0p1-28.el8_10.x86_64.rpm
openssh-cavs-0:8.0p1-28.el8_10.x86_64.rpm
openssh-cavs-debuginfo-0:8.0p1-28.el8_10.x86_64.rpm
openssh-clients-0:8.0p1-28.el8_10.x86_64.rpm
openssh-clients-debuginfo-0:8.0p1-28.el8_10.x86_64.rpm
openssh-debuginfo-0:8.0p1-28.el8_10.x86_64.rpm
openssh-debugsource-0:8.0p1-28.el8_10.x86_64.rpm
openssh-keycat-0:8.0p1-28.el8_10.x86_64.rpm
openssh-keycat-debuginfo-0:8.0p1-28.el8_10.x86_64.rpm
openssh-ldap-0:8.0p1-28.el8_10.x86_64.rpm
openssh-ldap-debuginfo-0:8.0p1-28.el8_10.x86_64.rpm
openssh-server-0:8.0p1-28.el8_10.x86_64.rpm
openssh-server-debuginfo-0:8.0p1-28.el8_10.x86_64.rpm
pam_ssh_agent_auth-0:0.10.3-7.28.el8_10.x86_64.rpm
pam_ssh_agent_auth-debuginfo-0:0.10.3-7.28.el8_10.x86_64.rpm
Rocky Linux 8 aarch64 - AppStream
openssh-askpass-0:8.0p1-28.el8_10.aarch64.rpm
openssh-askpass-debuginfo-0:8.0p1-28.el8_10.aarch64.rpm
Rocky Linux 8 x86_64 - AppStream
openssh-askpass-0:8.0p1-28.el8_10.x86_64.rpm
openssh-askpass-debuginfo-0:8.0p1-28.el8_10.x86_64.rpm