Back Linuxsecurity

Fedora 44 opkssh Primary SSH Command Problems and Denial of Service Threats

Linuxsecurity •LinuxSecurity Advisories • July 2, 2026

* Mon Jun 22 2026 Till Hofmann - 0.14.0-3 - Update bundled golang.org/x/crypto to 0.53.0

[ 1 ] Bug #2489950 - CVE-2026-39828 opkssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions [fedora-all] [ 2 ] Bug #2490498 - CVE-2026-39830 opkssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7794729685' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fedora SSH Component Expose Users to Command Execution Risks Fedora has released updates addressing two critical vulnerabilities in the opkssh component, identified as CVE-2026-39828 and CVE-2026-39830. Both vulnerabilities were published on May 22, 2026, and affect users of Fedora 43 and 44. CVE-2026-39828 allows unauthorized command execution due to improper handling of SSH permissions, while CVE-2026-39830 leads to denial of service through resource leaks from unsolicited SSH responses. The vulnerabilities can be exploited by attackers to gain unauthorized access or disrupt service. Users are advised to apply the updates using the 'dnf' package manager. The updates were made available on June 22, 2026, and are critical for maintaining system security. 4 sources 73

Extracted Entities

Fedora 44 opkssh Primary SSH Command Problems and Denial of Service Threats

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)

CWE Weaknesses (1)

Domains (1)