[CLSA-2026:1792932527] openssh: Fix of 7 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-25 12:49:03 UTC
Description:
- CVE-2026-106555: reset the GSSAPI client state before each authentication attempt - CVE-2026-106553: store delegated GSSAPI credentials only after successful GSSAPI user authorization - CVE-2026-106583: reject '$' and '\' in a user name given on the ssh command line - CVE-2026-106585: reject compressed packets that inflate beyond the maximum packet size - CVE-2026-60001: enforce the minimum per-attempt delay in GSSAPI and keyboard-interactive authentication (vendor patch) - CVE-2026-59998: document the GSSAPIStrictAcceptorCheck caveat (vendor patch) - CVE-2026-59997: fix the internal-sftp server argument parsing limit (vendor patch)
CVEs fixed:
Updated packages:
  • openssh-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm
    sha:f2ff6fa90a776a6ee3f2c53e7e6f428815e6f1808066a0447ba5fc45551a870e
  • openssh-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm
    sha:c3045ec41f1bea6f6494e6dece8489c64951425637427deff38b0e1c019c1599
  • openssh-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm
    sha:0245fb4085d38a7bb219b12fa69bd191f30bde53243277961460fd2a09340322
  • openssh-askpass-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm
    sha:31c9d3bfe66e82674068506841f4972296ded4b04e848a78bbace758fc53ef4d
  • openssh-askpass-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm
    sha:afe387226d69dd0a59a7b453a11e2f5b053a58e83766c153f5e3c981f2a79068
  • openssh-askpass-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm
    sha:f0367cf30eddb46c823020af3158840fd32fbdc6441f41c92925f668b006e105
  • openssh-clients-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm
    sha:b4e7b6b3c0815e0af3ad0e179d6207d9094f01e2a7bb904cecce35e7c4238894
  • openssh-clients-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm
    sha:601a6ce461a9867a69221169efcc742feed1b8928daebf9c12b1673459397a1c
  • openssh-clients-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm
    sha:056fd42ffd7555d6842b1e13ac36bf0ab6eb383da877178f5722e383d2a0f397
  • openssh-keycat-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm
    sha:f4fdd42a7874652c6eb497a436d387011ef9a59aa7b294cf9ea47906a7db426e
  • openssh-keycat-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm
    sha:be14af9c7a1e30a54c5c057bfac3e99c4d7ede39b3c01871bea145c7db496c07
  • openssh-keycat-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm
    sha:5c0df56b85042980f9ac97d6be4ccae6bf608d49a164a203be9a6548a8fc7ac2
  • openssh-server-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm
    sha:e12c0c9999335af9e60a1a3e1478435a2c70946717088bf0a318e6b59ef69d42
  • openssh-server-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm
    sha:dcdf526efd4287a6abfefc1a3de2d11ccbde70517f0526dceeb8de45de694387
  • openssh-server-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm
    sha:d744fb30f6455edbaf93b82f6d9af8425445f559f309fb3586e23dcc23b638e2
  • openssh-sk-dummy-9.9p1-13.el9_8.alma.1.tuxcare.els2.aarch64.rpm
    sha:5b22506d13f493ef4668520ce6b364eea7c3ac1908b108387e8ab6531a762756
  • openssh-sk-dummy-9.9p1-13.el9_8.alma.1.tuxcare.els2.i686.rpm
    sha:53367e836587328517718915fe21d2d4b70e1719892a8cfeed5f4fb3129a8eaf
  • openssh-sk-dummy-9.9p1-13.el9_8.alma.1.tuxcare.els2.x86_64.rpm
    sha:e90435bc679a309a1124720155f88325e577fa61f7fa633833ee8d40a55fc8e7
  • pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.tuxcare.els2.aarch64.rpm
    sha:4e82a4e2dbe696e0844a43e06c6576becb8ee23c7e1edd11aa86802de554be53
  • pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.tuxcare.els2.i686.rpm
    sha:6b61399bfa6032162b5cc6cafa834c2be7ab46ae67bf63d0485553bf32c337de
  • pam_ssh_agent_auth-0.10.4-8.13.el9_8.alma.1.tuxcare.els2.x86_64.rpm
    sha:0a12b0956b2c020541da5c04baad5ce02013a1ac0854d72155341c818a594c67
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.