Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

A flaw was found in OpenSSH. uncompress_buffer could keep growing the output buffer inside the inflate loop until it passed the maximum packet size. The fix returns SSH_ERR_INVALID_FORMAT once the buffer reaches PACKET_MAX_SIZE. This applies only after compression has been negotiated. The extra memory stays in that connection's process. This is not a demonstrated memory-corruption flaw, and it is a different bug and reporter from the LZ77 dictionary leak.