Release date:
2026-10-25 13:34:48 UTC
Description:
- CVE-2026-106585: a compressed packet could inflate far beyond the maximum
packet size and exhaust memory; reject it once the decompressed payload
reaches PACKET_MAX_SIZE. Backport upstream commit e0f85d83.
- CVE-2026-106555: sshd kept GSSAPI client state from a partially completed
authentication attempt and could reuse it in a later attempt; reset it before
each attempt. Backport upstream commits 670510d1 and d549f99d.
- CVE-2026-106553: sshd stored delegated GSSAPI credentials even when GSSAPI
user authorization had not succeeded; store them only after it succeeds.
Backport upstream commit 6f9cd19a.
- CVE-2026-106583: ssh(1) accepted '$' and '\' in a command-line user name,
allowing injection via shell-expanded commands; reject both characters.
Backport upstream commit 0c4c9a7b.
Updated packages:
-
openssh-8.7p1-45.el9_6.tuxcare.els19.aarch64.rpm
sha:980bd103a0ce59319f9225c37ae7e9896d892fd334d31ebe9ce51dc60a5bb666
-
openssh-8.7p1-45.el9_6.tuxcare.els19.i686.rpm
sha:e0354aaa727411a50c151430d453ed9f0c6674a4293a9746cce7df51da3c2853
-
openssh-8.7p1-45.el9_6.tuxcare.els19.x86_64.rpm
sha:8c36cba47feaf86096409e6cc56d5b16d34ce72cde772180e8f1a882d8eb2b91
-
openssh-askpass-8.7p1-45.el9_6.tuxcare.els19.aarch64.rpm
sha:20f8779694a7f600d0153b18ac1a040f6f5769897166ff2c56ca02acd68bb55f
-
openssh-askpass-8.7p1-45.el9_6.tuxcare.els19.i686.rpm
sha:e3ed86cfa7851a0bf75cd536e04ba19ed3c70a0646a8c79e54b7e12d8ffe989a
-
openssh-askpass-8.7p1-45.el9_6.tuxcare.els19.x86_64.rpm
sha:8370f816b025d6cae5bda259f1b3cc122c738b0be600fe3f765ce9a2ccc84407
-
openssh-clients-8.7p1-45.el9_6.tuxcare.els19.aarch64.rpm
sha:7a665c5643434658c3a5f7e6ee0f09b354843b4f5f1347c876bdf00701890f50
-
openssh-clients-8.7p1-45.el9_6.tuxcare.els19.i686.rpm
sha:f3ef1ba62be06348724c053ddf3db45aab5aad254ec3eca4bb6a5c26c4a55592
-
openssh-clients-8.7p1-45.el9_6.tuxcare.els19.x86_64.rpm
sha:fd713abad8047df9a6f9d403fee22ee134f4788da779ed3560e726cc1261a3ad
-
openssh-keycat-8.7p1-45.el9_6.tuxcare.els19.aarch64.rpm
sha:9c68cb3c7d53ba7bf84647bf0ff24cfa5e3d59597df6de295e9856546c046f39
-
openssh-keycat-8.7p1-45.el9_6.tuxcare.els19.i686.rpm
sha:b496666b53bef637669a0c441293c3c8f4497e9428147be577ae44321f0b1bd1
-
openssh-keycat-8.7p1-45.el9_6.tuxcare.els19.x86_64.rpm
sha:8ee1620f2705aa8e44f4539fe4e7b0b5fcccd5778ce013991002a7c7caee7833
-
openssh-server-8.7p1-45.el9_6.tuxcare.els19.aarch64.rpm
sha:60959acbfd979174e0a6fa039b2578a7956f7b4c9f2ec4f8a4aaf815e67e4e49
-
openssh-server-8.7p1-45.el9_6.tuxcare.els19.i686.rpm
sha:e54861389663f0265d6a21694d8644beac049256d5bb17bc73ce6f06bcae8642
-
openssh-server-8.7p1-45.el9_6.tuxcare.els19.x86_64.rpm
sha:f63e6742bd626c760f9180f05f529ea318be6ccc133a6eacbcd27d6a32ac08ac
-
openssh-sk-dummy-8.7p1-45.el9_6.tuxcare.els19.aarch64.rpm
sha:4c427419a69af0f1b5f4336938a33245ebf90466331964fdd70a2b61ffe0e70b
-
openssh-sk-dummy-8.7p1-45.el9_6.tuxcare.els19.i686.rpm
sha:05f3f7dca3646a7acb6e0f235ad117f4b08d2c78e3ccc13f353bafe520c13f1d
-
openssh-sk-dummy-8.7p1-45.el9_6.tuxcare.els19.x86_64.rpm
sha:612adec4570b78f5f288348fbf1040ded9b1d73a770ee4fd6b38323330803dd2
-
pam_ssh_agent_auth-0.10.4-5.45.el9_6.tuxcare.els19.aarch64.rpm
sha:395b86a0b906dc01103f9ed20826c0cd2a5ea5a5d74cc801fe23e01e5689413c
-
pam_ssh_agent_auth-0.10.4-5.45.el9_6.tuxcare.els19.i686.rpm
sha:795a63b0219e2847f698761d36a7e80f503dde809799721ff8b014179a6484cc
-
pam_ssh_agent_auth-0.10.4-5.45.el9_6.tuxcare.els19.x86_64.rpm
sha:e51d4771385828d1c3b4eccdc949b6a82ddbe444aae0383a9a6a1e03a4b4de25
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
