[CLSA-2026:1792158099] openssh: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-17 12:22:37 UTC
Description:
- CVE-2026-106555: reset GSSAPI client state before each authentication attempt (upstream 670510d1) - CVE-2026-106553: store delegated GSSAPI credentials only after successful authorization (upstream 6f9cd19a) - CVE-2026-106583: disallow '$' and '\' in a command-line user name (upstream 0c4c9a7b) - CVE-2026-106585: reject decompressed packets exceeding the maximum packet size (upstream e0f85d83)
CVEs fixed:
Updated packages:
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:d4f4187cdfe68efceaa550394016a9015d2ae55fdf83c564715c42d60b471795
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:3c877bc165ff50749def6d713e044f7a39196994927aa80952a0a5d8e26b6d72
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:2a1a18bec6a36a6336670ce42a6920c90d99dccd9e233743644955775ad79d2a
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:e61b01a0b3d91a39bdccc3d72ffcf7ec32954f0853281623914f9fc09bba437d
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:2a1271c02174f942b1c5764f9e2c4bd19a21200f76277e955a57319c234e170b
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:079a7ffba1e675a772fd6718434d0f2dcf723d89d462791b819a73db77c70a0e
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:7863d33ec2163ee538c1c7d86e5117c6d6e13f2097661c776b4ea8d691d42732
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:23bfc03c373b6dc9b861f7e267d84afb03ec08ebe3846677c6665b453f8015bb
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:e0a351194c59c1325ab0b9c562e09e34409807b4a232c6f65418613847c2a7ab
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:28b4018e25a4954085d615dfc13ca6c20b5962d43e120cd85b9d85d569d44f71
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:48493b64290b4e7280b436a05f4ff67754386c67f7057a3276345157428430a9
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:5f88f019953bc4e8e1aeab71aa0393c5eded4f955020fe32474bcd695aa48d29
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:586550518590bbfc3d4c12d1f44ccb69044faff4ae99a32ab7b8a2f10afb1d35
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:36e126440fc4832784399bc60388e82175fb1075e57bde5d5481a17cbb910985
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:b91661baa4f967902020cf0e4affba9c5a3323c4708e048005213cd53b833ebb
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:459c3165bdbd088e9c8bde3f8b87ad358fce35e65bc994674d61ec4b3347c009
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:2591f2fdf7caa5cd3c4397d0662641ed52c591c15bdc184199f97a993b0f2ff3
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:9cb03946d95d74f9c001ce81828151f7853613926eeeb2c4220814dc9dd3edc5
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:e4c564c579260cfa33a9b5769a07e1403072bd1ebdbe386fce4e2008c7d4cf7b
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:b9684456576b4db6ee7f5aa3779b7ed190b87609e25a84a3b1fa97db7202f59d
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:94d0a164084227f16a159c8299e97993a0bc12685d01e46ea85562d6fdf5e3cf
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:42c96bc99585d6e3afd678d9421a737649da86f2f0df3e6e7a1231bbd606db09
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:2c504bf38e67c65667dff470f1ec70806514a6ac6fbdbb2852c21f558302d331
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:cfdcfb997c52e468096bffd244173fd5ed0dfc84f370900eaa7e1449ef54f4cc
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.aarch64.rpm
    sha:8d1a53fa702939d2f2a8162f60dde891be1c1e1bdcfc2e3f52edd67ffb8cb7c9
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:31345da728cf5cf18a0c0baf26b81237a30cb428bf3846c03a114736e0a08385
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:a3fd7541a953eff31dcb08e7a4b127a9adc5485e5549d2d358db0f8de54618bb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.