Release date:
2026-10-13 12:05:17 UTC
Description:
* SECURITY UPDATE: unbounded decompression of compressed packets
- debian/patches/CVE-2026-106585.patch: fail uncompress_buffer() in
packet.c once the decompressed payload reaches PACKET_MAX_SIZE, so
a highly compressed packet cannot inflate past the maximum packet
length.
- CVE-2026-106585
Updated packages:
-
openssh-client_7.9p1-10+deb10u4+tuxcare.els8_amd64.deb
sha:496158d875189b857e8ea3bb323ad8c678b9fcc4
-
openssh-server_7.9p1-10+deb10u4+tuxcare.els8_amd64.deb
sha:7239216f703da8c27cf7f003ac61d8a509f4af44
-
openssh-sftp-server_7.9p1-10+deb10u4+tuxcare.els8_amd64.deb
sha:a7fd460fff2d62c3c9cb0bc9cebfcd91fbfa1e4e
-
openssh-tests_7.9p1-10+deb10u4+tuxcare.els8_amd64.deb
sha:51b23d9e61aa262ed52b9d82cba56873e45d3b37
-
ssh_7.9p1-10+deb10u4+tuxcare.els8_all.deb
sha:4ce062d886e48960e422902a34d8b8f14a061675
-
ssh-askpass-gnome_7.9p1-10+deb10u4+tuxcare.els8_amd64.deb
sha:6156c8b6cbfcb091f9c0475a8bb87b83f0b5202d
-
openssh-client_7.9p1-10+deb10u4+tuxcare.els8_arm64.deb
sha:bd22b6ccb25b3908746893442f55670192df7b9a
-
openssh-server_7.9p1-10+deb10u4+tuxcare.els8_arm64.deb
sha:9b34e9b3f4379d5768976f453ffabf1cfa89d79a
-
openssh-sftp-server_7.9p1-10+deb10u4+tuxcare.els8_arm64.deb
sha:6e3f198fbc9e33df7a67f69f49f0aca5a20ac425
-
openssh-tests_7.9p1-10+deb10u4+tuxcare.els8_arm64.deb
sha:d6959785255ef914e12a468e0197dfb5955c73f7
-
ssh-askpass-gnome_7.9p1-10+deb10u4+tuxcare.els8_arm64.deb
sha:264ac6311c38aee29162e38e1d752fd3b64b522a
-
openssh-client_7.9p1-10+deb10u4+tuxcare.els8_armel.deb
sha:fe07c86caa5148e1e65bedd38f6ce9370f71c7fd
-
openssh-server_7.9p1-10+deb10u4+tuxcare.els8_armel.deb
sha:0b12f5056ea186e2d2531c25be88c4924c3b4ea1
-
openssh-sftp-server_7.9p1-10+deb10u4+tuxcare.els8_armel.deb
sha:271542eef527475c6addffa21a5e713f69adcacd
-
openssh-tests_7.9p1-10+deb10u4+tuxcare.els8_armel.deb
sha:f692e0b3545c5f06cedafb68c7181fd5f8fe591e
-
ssh-askpass-gnome_7.9p1-10+deb10u4+tuxcare.els8_armel.deb
sha:aa063922561ee5ef69490c1908ffff13d27a069b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
