Release date:
2026-10-10 17:46:19 UTC
Description:
* SECURITY UPDATE: unbounded decompression of compressed packets
- debian/patches/CVE-2026-106585.patch: fail uncompress_buffer() in
packet.c once the decompressed payload reaches PACKET_MAX_SIZE, so
a highly compressed packet cannot inflate past the maximum packet
length.
- CVE-2026-106585
Updated packages:
-
openssh-client_8.4p1-5+deb11u7+tuxcare.els3_amd64.deb
sha:5464b49272004f0cc12cc341f3839dc8da980c27
-
openssh-server_8.4p1-5+deb11u7+tuxcare.els3_amd64.deb
sha:24c1035de77ddfb66053d9a202a2b5438e70ff1e
-
openssh-sftp-server_8.4p1-5+deb11u7+tuxcare.els3_amd64.deb
sha:97d22131c419b5d9d67dbfaf02f68ddc855fb181
-
openssh-tests_8.4p1-5+deb11u7+tuxcare.els3_amd64.deb
sha:8b5edf28c0460f17bcf1d559be873c51b2081381
-
ssh_8.4p1-5+deb11u7+tuxcare.els3_all.deb
sha:5a9fef4c7ea34afcf6bca4a865571594f9de6cf0
-
ssh-askpass-gnome_8.4p1-5+deb11u7+tuxcare.els3_amd64.deb
sha:9b4bf79a1aaebede2e10311e8c2888856e96e109
-
openssh-client_8.4p1-5+deb11u7+tuxcare.els3_arm64.deb
sha:05875ae7c1ad746e611b14afe815d5e6e27e29ae
-
openssh-server_8.4p1-5+deb11u7+tuxcare.els3_arm64.deb
sha:d4d47d6bba6b56fc0f2295dbcb38720200efd9cb
-
openssh-sftp-server_8.4p1-5+deb11u7+tuxcare.els3_arm64.deb
sha:b27634a36f02194e673f5d99a519e0dc6831ec11
-
openssh-tests_8.4p1-5+deb11u7+tuxcare.els3_arm64.deb
sha:472b46ab98a47a34441ee679bf69bb60c978e9db
-
ssh-askpass-gnome_8.4p1-5+deb11u7+tuxcare.els3_arm64.deb
sha:5a830414e7aed284c739372a79399b0882442c5e
-
openssh-client_8.4p1-5+deb11u7+tuxcare.els3_armel.deb
sha:9e3c51c4ace14313101a845af3d86cb0766a1d4a
-
openssh-server_8.4p1-5+deb11u7+tuxcare.els3_armel.deb
sha:db524cb8dcda46d39005539c9af53a3a8ce24433
-
openssh-sftp-server_8.4p1-5+deb11u7+tuxcare.els3_armel.deb
sha:a153b6687e56c067ee999859f9ffbe9767faa716
-
openssh-tests_8.4p1-5+deb11u7+tuxcare.els3_armel.deb
sha:d552dc80fbbd6e155340869ad7d34f65b465e791
-
ssh-askpass-gnome_8.4p1-5+deb11u7+tuxcare.els3_armel.deb
sha:ff02e69d7ccf721baea22db3fc50733841b9084a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
