ELSA-2025-20126-0

ELSA-2025-20126-0 - openssh security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-11-25

Description

[9.9p1-11.0.1]
- Upstream references found with /usr/bin/ssh [Orabug: 37824421]

[9.9p1-11]
- Move the redhat help message to debug1 log level
Resolves: RHEL-93957

[9.9p1-10]
- Support for authentication indicators in OpenSSH
Resolves: RHEL-40790

[9.9p1-9]
- CVE-2025-32728: Fix logic error in DisableForwarding option
Resolves: RHEL-86819
- Provide better error for non-supported private keys
Resolves: RHEL-68124
- Ignore bad hostkeys in known_hosts file
Resolves: RHEL-83644

[9.9p1-8]
- OpenSSH should not use its own implementation of MLKEM
Resolves: RHEL-58252
- Correct processing of Compression directive
Resolves: RHEL-68346
- Supress systemd warning
Resolves: RHEL-84816

Related CVEs

CVE-2025-32728

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	openssh-9.9p1-11.0.1.el10.src.rpm	33d09a5dc009c8f60808f8e9470f046b50d85d2007f1c6269c8f4053dea1230e	-	ol10_aarch64_appstream
	openssh-9.9p1-11.0.1.el10.src.rpm	33d09a5dc009c8f60808f8e9470f046b50d85d2007f1c6269c8f4053dea1230e	-	ol10_aarch64_baseos_latest
	openssh-9.9p1-11.0.1.el10.src.rpm	33d09a5dc009c8f60808f8e9470f046b50d85d2007f1c6269c8f4053dea1230e	-	ol10_aarch64_u1_baseos_base
	openssh-9.9p1-11.0.1.el10.aarch64.rpm	4beebaa46fd7c6ad3b228a8a8af1744331dbd6bcba8f2f70f9cef51e15429972	-	ol10_aarch64_baseos_latest
	openssh-9.9p1-11.0.1.el10.aarch64.rpm	4beebaa46fd7c6ad3b228a8a8af1744331dbd6bcba8f2f70f9cef51e15429972	-	ol10_aarch64_u1_baseos_base
	openssh-askpass-9.9p1-11.0.1.el10.aarch64.rpm	a1422f3b1530a01564843cf352c72392f134dff27dab9fd5e8bb13bf7f6e6050	-	ol10_aarch64_appstream
	openssh-clients-9.9p1-11.0.1.el10.aarch64.rpm	1386845fa960ac6513388fb70e624f5c6ee2a18811014dcc19548bdcfbb675f4	-	ol10_aarch64_baseos_latest
	openssh-clients-9.9p1-11.0.1.el10.aarch64.rpm	1386845fa960ac6513388fb70e624f5c6ee2a18811014dcc19548bdcfbb675f4	-	ol10_aarch64_u1_baseos_base
	openssh-keycat-9.9p1-11.0.1.el10.aarch64.rpm	1afed057ea01f23c171e488b1a3100de3e20df883a1200ff10c4cd4e53423aeb	-	ol10_aarch64_baseos_latest
	openssh-keycat-9.9p1-11.0.1.el10.aarch64.rpm	1afed057ea01f23c171e488b1a3100de3e20df883a1200ff10c4cd4e53423aeb	-	ol10_aarch64_u1_baseos_base
	openssh-keysign-9.9p1-11.0.1.el10.aarch64.rpm	5b33cbc4f883c1f4e33ad336bf5fb43b646a7fb4c5a8927ca5bc9b79bc0e4750	-	ol10_aarch64_appstream
	openssh-server-9.9p1-11.0.1.el10.aarch64.rpm	ea82c5bea37eab1439553cb08b69c90dbbcd160ef4b15956cdae56fea1ddd6e5	-	ol10_aarch64_baseos_latest
	openssh-server-9.9p1-11.0.1.el10.aarch64.rpm	ea82c5bea37eab1439553cb08b69c90dbbcd160ef4b15956cdae56fea1ddd6e5	-	ol10_aarch64_u1_baseos_base
Oracle Linux 10 (x86_64)	openssh-9.9p1-11.0.1.el10.src.rpm	33d09a5dc009c8f60808f8e9470f046b50d85d2007f1c6269c8f4053dea1230e	-	ol10_x86_64_appstream
	openssh-9.9p1-11.0.1.el10.src.rpm	33d09a5dc009c8f60808f8e9470f046b50d85d2007f1c6269c8f4053dea1230e	-	ol10_x86_64_baseos_latest
	openssh-9.9p1-11.0.1.el10.src.rpm	33d09a5dc009c8f60808f8e9470f046b50d85d2007f1c6269c8f4053dea1230e	-	ol10_x86_64_u1_baseos_base
	openssh-9.9p1-11.0.1.el10.x86_64.rpm	e6570b5c039d5f74bca2c8ee810fe50a707ac8161a32934d215f02a6c1d93b49	-	ol10_x86_64_baseos_latest
	openssh-9.9p1-11.0.1.el10.x86_64.rpm	e6570b5c039d5f74bca2c8ee810fe50a707ac8161a32934d215f02a6c1d93b49	-	ol10_x86_64_u1_baseos_base
	openssh-askpass-9.9p1-11.0.1.el10.x86_64.rpm	66b6378b8370d53feb0a7aca9505306cb6350d914608efb7e201e1fc314960f9	-	ol10_x86_64_appstream
	openssh-clients-9.9p1-11.0.1.el10.x86_64.rpm	e5c0ec0aa2ed745f486d1b2ac982258755a65c3e8d7790efac2ea1c6fdd00b7c	-	ol10_x86_64_baseos_latest
	openssh-clients-9.9p1-11.0.1.el10.x86_64.rpm	e5c0ec0aa2ed745f486d1b2ac982258755a65c3e8d7790efac2ea1c6fdd00b7c	-	ol10_x86_64_u1_baseos_base
	openssh-keycat-9.9p1-11.0.1.el10.x86_64.rpm	788d4384fc0c29d969ec10c4bac21061cda996e4b6f7098554eeac5044220028	-	ol10_x86_64_baseos_latest
	openssh-keycat-9.9p1-11.0.1.el10.x86_64.rpm	788d4384fc0c29d969ec10c4bac21061cda996e4b6f7098554eeac5044220028	-	ol10_x86_64_u1_baseos_base
	openssh-keysign-9.9p1-11.0.1.el10.x86_64.rpm	f8654643ba60e7227a59a5dcd74278bda44041a70e51d2152f6115c1a8735f4c	-	ol10_x86_64_appstream
	openssh-server-9.9p1-11.0.1.el10.x86_64.rpm	531235ca665f6713147357a39683c46addb4e55590e1325a302e917305321d3d	-	ol10_x86_64_baseos_latest
	openssh-server-9.9p1-11.0.1.el10.x86_64.rpm	531235ca665f6713147357a39683c46addb4e55590e1325a302e917305321d3d	-	ol10_x86_64_u1_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team