[CLSA-2026:1784847296] openssh: Fix of CVE-2026-60000
Type:
security
Severity:
Important
Release date:
2026-07-23 22:55:21 UTC
Description:
- CVE-2026-60000: fix GSSAPI pre-authentication denial of service where input_gssapi_errtok did not finish the postponed authentication attempt, so failed GSSAPI requests were never counted against MaxAuthTries
CVEs fixed:
Updated packages:
  • openssh-5.3p1-125.el6.tuxcare.els10.x86_64.rpm
    sha:d27ab19d1e979acc81bfdf924de7ee8d0b65c608a61518e2ee976d1f6009e0a6
  • openssh-askpass-5.3p1-125.el6.tuxcare.els10.x86_64.rpm
    sha:9f99ee678229b4fa222ce394c907a8f2d2cf87f5d98ecf5ae999feafc9150dea
  • openssh-clients-5.3p1-125.el6.tuxcare.els10.x86_64.rpm
    sha:a99121d584b325675e66359943b5166c7247a9f2d7d37a65431ca8dae1e20f46
  • openssh-ldap-5.3p1-125.el6.tuxcare.els10.x86_64.rpm
    sha:a1fb062c73c95e2cba025c4a00c996e1b623623306491c945783287f8656c73f
  • openssh-server-5.3p1-125.el6.tuxcare.els10.x86_64.rpm
    sha:836bd935d9498ee6009ec9a5c19496466a951046ecfab2baabc7c8581a14ba95
  • pam_ssh_agent_auth-0.9.3-125.el6.tuxcare.els10.i686.rpm
    sha:254a9d7d9e333e41fbfba680b6dfa8334d8a5570cbb640285e1f6b8aa8051052
  • pam_ssh_agent_auth-0.9.3-125.el6.tuxcare.els10.x86_64.rpm
    sha:d5731fc5306ec41a57602bbc36d63c2a38d6eefbf936cf708dd3900e3d9a2cac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.