[CLSA-2026:1792079960] openssh: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-22 21:48:25 UTC
Description:
- CVE-2026-106555: reset GSSAPI client state before each authentication attempt (upstream 670510d1) - CVE-2026-106553: store delegated GSSAPI credentials only after successful authorization (upstream 6f9cd19a) - CVE-2026-106583: disallow '$' and '\' in a command-line user name (upstream 0c4c9a7b) - CVE-2026-106585: reject decompressed packets exceeding the maximum packet size (upstream e0f85d83)
Updated packages:
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:4860a9c42bcd716a124cb56e639ea45e32890c1672066b591e7b584c3aaa514d
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:6c471bb996aa7cbb2010768073c50b3bebebfcffb4c94ed474f9fe70403f64cf
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:749786f7cd438ceef863d8f19fc5ed6210c5e8b7717a13f27c083723b193ce1f
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:55e7949b859fb9a034d45a4ea9a8a691188b7e04ed0d24992bed1226fc36ba44
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:1e18b35b8f3b269e3018978bd1b155d5cb775e1c1783ada778b1f74e17494a17
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:6605b76fe32bc036cbf9895cc21e3a26d66f12897fb5eb79a34f63620108f572
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:b43cb9c659d7815cd2130aa6ec7ac66dd0f22a1e7694c97ddeae4ea508794aa4
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:0501b813f5f44bce97db8802449358b7bb3e7d78629a9d567104b495fed6321d
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:0cd7d9b98f3ec39c4d4dd8bfd91e9c9093742902233134763ecd32fd3a6bc629
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:fe3f2f9a2662dc8b895b1863196818fa7a2ed637dc9f6650ccb1aa03096ca7d1
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:55991de6060050c07e79cd588a746774f4e2b00d40e2d08bb79f4effee3bc7a9
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:57045ed2c75222d6941df515a225577ecb26501ab0449f5ca495db2f3a7766b2
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:6c2a070e4a4fd9eac8d70af21bb9dd675dc5e6e1ef27d3df394c58e317b9f8be
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:cbef065ddf66154f4a0ff066f29610d95f499696b2fdef5702ebc6638389826a
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:b47b71fb186faf0b57de05d5c13f14a9504b5592f13983c98ed759ef3d72c9a8
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:80807dd0d1ff4578da1f965cf9fa3ed4cff2f472d83a47a5af95b78b358ec144
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:9cc09808e0b3770b35a89d1df8911d86219db2882d577e5964bf4e29a3088685
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:629f04486ee430b94628f6d1fefd917bd3e0c94c470b8d78f1cf971758e1c700
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.