Release date:
2026-10-17 00:36:47 UTC
Description:
- CVE-2026-106555: sshd kept GSSAPI client state from a partially completed
GSSAPIAuthentication attempt and could reuse it in a later attempt; reset the
global GSSAPI client state before each authentication attempt.
Backport upstream commit 670510d1.
- CVE-2026-106553: sshd could store delegated GSSAPI credentials from a failed
GSSAPIAuthentication attempt; only store them when GSSAPI user authorization
succeeded. Backport upstream commit 6f9cd19a.
- CVE-2026-106583: ssh(1) accepted '$' and '\\' in a command-line user name,
allowing shell injection via expanded commands; reject both characters.
Backport upstream commit 0c4c9a7b.
- CVE-2026-106585: ssh(1) and sshd did not check that decompressed packet
payloads stay below the maximum packet size; reject oversized inflated
payloads. Backport upstream commit e0f85d83.
Updated packages:
-
openssh-8.7p1-30.el9_2.tuxcare.els24.aarch64.rpm
sha:433dfad3116b4e89404220b488c7cd82f3b09967c35f7f0f84437f05e9641634
-
openssh-8.7p1-30.el9_2.tuxcare.els24.i686.rpm
sha:5e31ece62227da1b5b34e2ce24eb834d5de55ebb2daf53314863201041dbdc49
-
openssh-8.7p1-30.el9_2.tuxcare.els24.x86_64.rpm
sha:af6ddc5782d1074b5142439fa6d83b5a040a8f4c3c9fde40ffac972353558f24
-
openssh-askpass-8.7p1-30.el9_2.tuxcare.els24.aarch64.rpm
sha:19411715337d9b11127386c9e50a19419624b1a60efab9fee69be4318af915d2
-
openssh-askpass-8.7p1-30.el9_2.tuxcare.els24.i686.rpm
sha:b4272f656960e340b8115693414294a701137785974886deac5445d8a953421b
-
openssh-askpass-8.7p1-30.el9_2.tuxcare.els24.x86_64.rpm
sha:845a72560b9958c80ed2efdaaf424ac1e94cdc960f652d94f52dae088665266b
-
openssh-clients-8.7p1-30.el9_2.tuxcare.els24.aarch64.rpm
sha:31a405cea6176078372daefd57c888037e565d347cf3e46d7ac04bb77f9c4263
-
openssh-clients-8.7p1-30.el9_2.tuxcare.els24.i686.rpm
sha:0a80ac7c45b158804bc7aa8a3c659150b7cdf8376c38d5cb5bbedf68b3ed9646
-
openssh-clients-8.7p1-30.el9_2.tuxcare.els24.x86_64.rpm
sha:8efc34c40c5e0544df59d4d92c6bfc19197d7468aeb9b00fa8ad19d051c5ccb1
-
openssh-keycat-8.7p1-30.el9_2.tuxcare.els24.aarch64.rpm
sha:0ca4ae0c7547a4c223a58ccac47fbf05d75236217637bd70fd9266e5c66c4366
-
openssh-keycat-8.7p1-30.el9_2.tuxcare.els24.i686.rpm
sha:d873b764cec53756431515a6b605d71800dc8fdebbc1abdb51d22512370520d2
-
openssh-keycat-8.7p1-30.el9_2.tuxcare.els24.x86_64.rpm
sha:277aec95afc2b2bcf30344a9c7620289d081b3f8f63cdb39a03acade257dc2b5
-
openssh-server-8.7p1-30.el9_2.tuxcare.els24.aarch64.rpm
sha:cd8651dc1460ba893909fd1bfdc8070015d4a20b21074777f80a52d14aed9c2d
-
openssh-server-8.7p1-30.el9_2.tuxcare.els24.i686.rpm
sha:fd9af94ad76cd23c4e69f48f0f23a058f63b10b9a57abb9c77afe4b6598295b3
-
openssh-server-8.7p1-30.el9_2.tuxcare.els24.x86_64.rpm
sha:af70aa92691ab3cb2aae6e0ddab9db5d285132d5ddc4560bcb00a43c67c7e431
-
openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els24.aarch64.rpm
sha:cabe2ac8934a9d18e3c4d4adb0954c557650e388c0b13f72e5388ead24f34f30
-
openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els24.i686.rpm
sha:0e200f3d2bc8792ae4bd37bfdf3377a3962d1ef5267af33aace8c2be58d3302b
-
openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els24.x86_64.rpm
sha:98ef5c6c560e2f9d5d19923082f64ae5605cd30060c360db54ae97dcb03bd26a
-
pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els24.aarch64.rpm
sha:05babfd91fc3af49182de3e8a9e5cc91b5832279e2b79a777f20dfc7ba65e433
-
pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els24.i686.rpm
sha:ef62aa643950e263afcc9e864a8859d774c68ba11cf95638978cf3dfda16a296
-
pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els24.x86_64.rpm
sha:9becd73dabbd4fd6df1b7a4e552b31b48af2ceb31ccdc001ebfe73e75eec950b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
