Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Fedora 43 python-asyncssh Critical Unauthorized Access Fix 2026-574496d9ae

fedora
Calendar Grey July 19, 2026
Scroller Fedora
Critical update for Fedora Python-AsyncSSH addresses unauthorized file modifications and path traversal risks.
import asyncssh 2.23.1 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP cl...

Summary

Python 3 library for asynchronous client and

server-side SSH communication. It uses the Python asyncio module and

implements many SSH protocol features such as the various channels,

SFTP, SCP, forwarding, session multiplexing over a connection and more.

Update Information:

import asyncssh 2.23.1 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client

Topics%20covered

Topics Covered

security advisory unauthorized access fedora critical path traversal file modification

Change Log

* Sat Jul 11 2026 Georg Sauthoff - 2.23.1-1 - import asyncssh 2.23.1 - fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape (fixes fedora#2498421, fixes fedora#2498423) - fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client (fixes fedora#2498488)

References


[ 1 ] Bug #2498421 - CVE-2026-54590 python-asyncssh: AsyncSSH: Unauthorized file modification via authorized-keys directory escape [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498421 [ 2 ] Bug #2498423 - CVE-2026-54590 python-asyncssh: AsyncSSH: Unauthorized file modification via authorized-keys directory escape [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498423 [ 3 ] Bug #2498488 - CVE-2026-54591 python-asyncssh: AsyncSSH: Arbitrary file write via path traversal in SCP client [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498488

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-574496d9ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python-asyncssh
Product: Fedora 43
Version: 2.23.1
Release: 1.fc43
URL: https://github.com/ronf/asyncssh
Summary: Asynchronous SSH for Python

Topics%20covered

Topics Covered

security advisory unauthorized access fedora critical path traversal file modification

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.