[CLSA-2026:1792154919] Fix CVE(s): CVE-2026-106553, CVE-2026-106555, CVE-2026-106583
Type:
security
Severity:
Important
Release date:
2026-10-16 12:48:51 UTC
Description:
* SECURITY UPDATE: GSSAPI client state persisting across authentication attempts - debian/patches/CVE-2026-106555.patch: reset the GSSAPI client state at the start of each userauth request and of each pre-authentication GSSAPI context setup in the monitor. - CVE-2026-106555 * SECURITY UPDATE: GSSAPI delegated credentials stored after failed authentication - debian/patches/CVE-2026-106553.patch: only store delegated GSSAPI credentials when the GSSAPI client was authorized. - CVE-2026-106553 * SECURITY UPDATE: command injection via command-line user name - debian/patches/CVE-2026-106583.patch: disallow '$' and '\' in a user name supplied on the ssh command line. - CVE-2026-106583
CVEs fixed:
Updated packages:
  • openssh-client_7.9p1-10+deb10u4+tuxcare.els9_amd64.deb
    sha:cb7fd21b9a5a4d612bd89cfe22761738bac648c7
  • openssh-server_7.9p1-10+deb10u4+tuxcare.els9_amd64.deb
    sha:3c4f66aed93c281554b4b3a6899393a55edd3a23
  • openssh-sftp-server_7.9p1-10+deb10u4+tuxcare.els9_amd64.deb
    sha:7611a9d07c569f76ae0d29597824d49f77544180
  • openssh-tests_7.9p1-10+deb10u4+tuxcare.els9_amd64.deb
    sha:bbf5bae96d998427c14038e659ca8ea36a14de4b
  • ssh_7.9p1-10+deb10u4+tuxcare.els9_all.deb
    sha:9e13a97a8a33fb91896fbf9f1c3107ea22da5f7e
  • ssh-askpass-gnome_7.9p1-10+deb10u4+tuxcare.els9_amd64.deb
    sha:c023801a5f54bcd071103aa1db80dff9216cc2e7
  • openssh-client_7.9p1-10+deb10u4+tuxcare.els9_arm64.deb
    sha:6c50e2e87ed458e1e5039e6ac7260cff7f323339
  • openssh-server_7.9p1-10+deb10u4+tuxcare.els9_arm64.deb
    sha:82026092e2cbe75d1290e53b3f326937dacc3938
  • openssh-sftp-server_7.9p1-10+deb10u4+tuxcare.els9_arm64.deb
    sha:4c17e0c18efc90d3f9dd6547dd279ead9c37a2d7
  • openssh-tests_7.9p1-10+deb10u4+tuxcare.els9_arm64.deb
    sha:a8068f011523dd75a7d87296b6016416a2176338
  • ssh-askpass-gnome_7.9p1-10+deb10u4+tuxcare.els9_arm64.deb
    sha:1705162defef18392ca96211a2c46cf369c61e45
  • openssh-client_7.9p1-10+deb10u4+tuxcare.els9_armel.deb
    sha:7836ea43df0fd80fb15ddd904e51dce1d4ac7a70
  • openssh-server_7.9p1-10+deb10u4+tuxcare.els9_armel.deb
    sha:883fb14054583acb84c8cf7d59df91269496d5a4
  • openssh-sftp-server_7.9p1-10+deb10u4+tuxcare.els9_armel.deb
    sha:2a69f8bedb738176d87dd9ac12e583fba8c67a65
  • openssh-tests_7.9p1-10+deb10u4+tuxcare.els9_armel.deb
    sha:1b7c00b9fd483c8f96a5d4d4fcfd3209d210d58a
  • ssh-askpass-gnome_7.9p1-10+deb10u4+tuxcare.els9_armel.deb
    sha:10053ec5b8aea07d06a81242519ad86ec832a51b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.