Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Fedora 44 python-asyncssh Important Unauthorized File Write CVE-2026-54590

fedora
Calendar Grey July 19, 2026
Scroller Fedora
Update to python-asyncssh 2.24.0 fixes unauthorized file modification and path traversal vulnerabilities in Fedora.
update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP ...

Summary

Python 3 library for asynchronous client and

server-side SSH communication. It uses the Python asyncio module and

implements many SSH protocol features such as the various channels,

SFTP, SCP, forwarding, session multiplexing over a connection and more.

Update Information:

update to version 2.24.0 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client

Topics%20covered

Topics Covered

security advisory fedora important path traversal unauthorized modification arbitrary file write

Change Log

* Sun Jun 28 2026 Georg Sauthoff - 2.24.0-1 - update to version 2.24.0 (fixes fedora#2468438) * Fri Jun 12 2026 Yaakov Selkowitz - 2.22.0-6 - Rebuilt for openssl 4.0 * Thu Jun 4 2026 Python Maint - 2.22.0-5 - Rebuilt for Python 3.15 * Wed May 6 2026 Miro Hrončok - 2.22.0-4 - Properly filter out test dependency on uvloop and python-pkcs11

References


[ 1 ] Bug #2468438 - python-asyncssh-2.24.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2468438 [ 2 ] Bug #2498421 - CVE-2026-54590 python-asyncssh: AsyncSSH: Unauthorized file modification via authorized-keys directory escape [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498421 [ 3 ] Bug #2498423 - CVE-2026-54590 python-asyncssh: AsyncSSH: Unauthorized file modification via authorized-keys directory escape [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498423 [ 4 ] Bug #2498488 - CVE-2026-54591 python-asyncssh: AsyncSSH: Arbitrary file write via path traversal in SCP client [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2498488

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1f248487e4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-asyncssh
Product: Fedora 44
Version: 2.24.0
Release: 1.fc44
URL: https://github.com/ronf/asyncssh
Summary: Asynchronous SSH for Python

Topics%20covered

Topics Covered

security advisory fedora important path traversal unauthorized modification arbitrary file write

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.