REDHAT-BUG-2497944: Medium severity OpenSSH OpenSSH vulnerability
Published Jul 8, 2026
·Updated
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
Affected Software
1 affected component
OpenSSH OpenSSH<10.4
Event History
Jul 8, 2026
Data Sourced
via Red Hat·01:02 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2497944?
The severity of REDHAT-BUG-2497944 is classified as medium (4).
2
How do I fix REDHAT-BUG-2497944?
To fix REDHAT-BUG-2497944, upgrade to OpenSSH version 10.4 or later.
3
What does REDHAT-BUG-2497944 affect?
REDHAT-BUG-2497944 affects the scp command in OpenSSH prior to version 10.4.
4
What is the risk associated with REDHAT-BUG-2497944?
The risk associated with REDHAT-BUG-2497944 is that it may lead to unintended file placements in the parent directory during remote file transfers.
5
What software is involved in REDHAT-BUG-2497944?
The software involved in REDHAT-BUG-2497944 is OpenSSH.