Multiple security vulnerabilities have been identified in OpenSSH, including privilege escalation via the scp legacy protocol, security bypass due to mishandling of authorized_keys principals option, information disclosure from unintended cryptographic algorithm usage, low integrity impact from unconfirmed proxy-mode multiplexing sessions, and arbitrary command execution through shell metacharacters in usernames. These issues affect various versions of OpenSSH prior to the fixed releases 8.7p1-49.el9_7.alma.1 and 0.10.4-5.49.el9_7.alma.1. A security update addressing these vulnerabilities is available and recommended for affected systems.