Red Hat Bug Fix Advisory: openssh bug fix and enhancement update

This advisory from Red Hat addresses a security vulnerability identified as CVE-2025-26466 in OpenSSH, along with other bug fixes and enhancements. The update rebases OpenSSH to version 9.9 and resolves issues such as a bug in the use-advertised-algorithms in FIPS mode, separation of ssh-keysign into a dedicated subpackage, and a regression in the Match directive. The advisory applies to Red Hat Enterprise Linux 10 across multiple architectures including x86_64, s390x, ppc64le, and aarch64, including extended update support and extended life cycle versions. The vendor provides official fixes through updated packages and detailed release notes.

The vulnerability CVE-2025-26466 is classified with medium severity. The advisory indicates that the issue affects OpenSSH in Red Hat Enterprise Linux 10 and that the update includes fixes and enhancements to improve security and functionality. There are no known exploits in the wild at the time of publication. The impact is mitigated by applying the updated OpenSSH packages provided by Red Hat.

Red Hat has released official fixes for this issue as part of an OpenSSH update rebased to version 9.9 for Red Hat Enterprise Linux 10. Users should apply the update following Red Hat's guidance in the referenced article (https://access.redhat.com/articles/11258) and the release notes. No additional mitigation steps are indicated beyond applying the official update.