Release date:
2026-10-17 13:09:48 UTC
Description:
- CVE-2026-106555: reset GSSAPI client state before each authentication attempt
- CVE-2026-106553: store GSSAPI delegated credentials only after successful GSSAPI authentication
- CVE-2026-106583: disallow '$' and '\' in command-line user names
- CVE-2026-106585: reject compressed packets that inflate beyond the maximum packet size
Updated packages:
-
openssh-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:5eb3aafe5572e76dcc5917098bf8e6968b1736871c3160d77bcf65f66cba50ef
-
openssh-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:6bd6cb927568e91d50be6c26f286ed363646e2c401b6cb1ac2b7edecc889b06b
-
openssh-askpass-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:5d72d2a378adbc1589289331feb14a31791ddfc9305c4f73d7aaf28f71ac2c9a
-
openssh-askpass-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:78ef08205f3c28ed142ea3691a0c89a26257ee1b2ac371677aa21c34e3698c6a
-
openssh-clients-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:f8e57aeca0b9d172e7720466fdaaff480362ac9201cefd6cd6f6b96206f3eec3
-
openssh-clients-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:433a2b96000d5dba6a70c68f77f1226792b6197b6760c38502585ea2885377a2
-
openssh-ldap-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:a7aff6afe571120224e31400614c1c6c3de21c826656b46aadcdf4c3a9734d73
-
openssh-ldap-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:d6033356137cd1e2689589558e19defa481fd9ce3e9d502996fbb43797cf860c
-
openssh-server-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:a782c16d6e959e39c6565243b677c4fe7eb50f753eebd8601ed5ccd0c55efffa
-
openssh-server-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:3844cdd47c4b6021e8e51890df91d30d0f0185e7536778a9bba300267efcb7cb
-
pam_ssh_agent_auth-0.9.3-125.el6.tuxcare.els11.i686.rpm
sha:7718210077abadeb38042ea0f97f2597ac031b4629364575c67ce8534bc3f1d0
-
pam_ssh_agent_auth-0.9.3-125.el6.tuxcare.els11.x86_64.rpm
sha:0fcd3322f7df1563131abe7f077b424dcaa0213b1ea2af686106b1595fb4ceca
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
