Release date:
2026-10-16 04:27:30 UTC
Description:
- CVE-2026-106555: reset the GSSAPI client state before each authentication
attempt so a partial attempt cannot be reused by a later one
(upstream 670510d1)
- CVE-2026-106553: store delegated GSSAPI credentials only once the GSSAPI
client was authorized (upstream 6f9cd19a)
- CVE-2026-106583: disallow '$' and '\' in a command-line supplied remote
user name (upstream 0c4c9a7b)
- CVE-2026-106585: reject compressed payloads that inflate beyond the
maximum packet size (upstream e0f85d83)
Updated packages:
-
openssh-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:a83ab016202b2c010f020262a4ae4886b39d1f6922ddb667dc8a85d142315721
-
openssh-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:ba601714161eda76ff67137d08bc1fcd8c91e124f1115053d9700e496451c4f4
-
openssh-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:9cb2e13a5b87195fe3d46789b48e91672fe917a34bc365327f86fdb6396e42c4
-
openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:abdc5116dee457cb5fdfea29a340219b5124ed43b47a8b66e8f9b17f4cca3739
-
openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:dcf8c1f1926e50658e7aa127a73e079a822b882d4e86dc75e2d5ac5156a2f9ca
-
openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:b12eaf6cbd9271f2dc95e7aa850c2b9852f63efaaf7cbe379863304b45cb7950
-
openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:f93aa34cd880f28dd3af8f06545524eba3de18ccead4b2c228f0ed3ffc76737c
-
openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:f213d2a8dc00bb8f2a7d45e229acccd0016d7c1363b47b64d2ac3a3a43c6cc0d
-
openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:dba88d630317c4a38b6cdaf236db8393da92778065f1f7f7775f43330f8c2f16
-
openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:b93ea08d536d5e32c7b4332f51dfa93d7675f679d8555d0b8fdb0967ebf1a3ed
-
openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:4abef7d8112c10882e7da1dd2c45d5aa4eefb35f2e11b3b04dffe0272fa77e5e
-
openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:01dd933dd31efc6c77fd956ffadd2ca9a12eec1116258152e2cc84e46318c20d
-
openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:4cde2d141386939c6507a40dfd924d1682a53a836241a8bba13601db75bfba8a
-
openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:114e1aafe0d3f31a61fe1e24dfd70824884af091501bac7db1237cb75f42986a
-
openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:4a60561610da2e31f0a8e7a39a7d8b8b299a09f5c063d9fc8b8f9ff0856d8f6c
-
openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:03d02ba2a467c27670f845d27a6b4501f3c2ba10f2bcaab79290e51b898d0e2a
-
openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:108ad8b9b439e741653e30e9bde15411a71643e15990e93851b5edb1f1f4e186
-
openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:0b601d2d3bd07f144b9c9dc9f8ccfdd451edf87dec286dcf8d9489f069c0e8b4
-
openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:4dfb6b01f01b5f2b2712015f727885ed67a234ea1e9464ee1415249805bc8a35
-
openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:ca89640715c45f365cdc94e7d5a71e7c7fdebfd50c186413a9102e2f0df419f3
-
openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:de3ee9a7adddf4c4ba6f363f673a8f960945327129bfcdbda5269c9b8e132b23
-
openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:eb2f75f41a02e79061e9a66dfd5ee98166ebe1b9f46efea334b2ff457045e6bc
-
openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:136c31b0dabd7940e89650ae8dd001f775ca557d64df7d37435ff6ebaba8724d
-
openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:565d5bbdcc06a6afdea5ec64f4d4cf8d9bc4e4c9bcbee792993c0b67db38c568
-
pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els4.aarch64.rpm
sha:565e5a05053b8163e48dce9827ab485873eb12833a80f72e708f3b9bbe2f582e
-
pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els4.i686.rpm
sha:7014f493e1ab5cd6cf8aa90b5b699315f0d001d09613a32eb4c95e935517a323
-
pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els4.x86_64.rpm
sha:fadfed5c001801bcc194cb3c098ced438c22c5528e737627663cee54b52bd77c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
