Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceRHSA-2026:1678

RHSA-2026:1678

MEDIUM5.3

Red Hat Security Advisory: openssh security update

Published Feb 2, 2026

Modified Yesterday

Fix available

Affected Packages(14 packages)

openssh

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-askpass

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-askpass-debuginfo

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-clients

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-clients-debuginfo

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-debuginfo

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-debugsource

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-keycat

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-keycat-debuginfo

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

openssh-keysign

Red Hat enterprise_linux_eus 10.0

Fixed in:

0:9.9p1-7.el10_0.1

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:1678 REPORThttps://access.redhat.com/security/cve/CVE-2025-61984 REPORThttps://access.redhat.com/security/cve/CVE-2025-61985 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2401960 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2401962 ARTICLEhttps://marc.info/?l=openssh-unix-dev&m=175974522032149&w=2 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-61984 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-61985 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1678.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-61984 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-61985 ARTICLEhttps://www.openssh.com/releasenotes.html#10.1p1 ARTICLEhttps://www.openwall.com/lists/oss-security/2025/10/06/1

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Upstream

CVE-2025-61984 CVE-2025-61985

Ecosystems

Red Hat enterprise_linux_eus 10.0

Timeline

PublishedFeb 2, 2026

ModifiedFeb 2, 2026

RHSA-2026:1678 | Mondoo Vulnerability Intelligence