Release date:
2026-10-15 15:50:46 UTC
Description:
- CVE-2026-106555: reset GSSAPI client state before each authentication attempt
- CVE-2026-106553: store GSSAPI delegated credentials only after successful GSSAPI authentication
- CVE-2026-106583: disallow '$' and '\' in command-line user names
- CVE-2026-106585: reject compressed packets that inflate beyond the maximum packet size
Updated packages:
-
openssh-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:e5f3b2443d51b0e48530e704a67961f4e8accc3f183abeb0f7be0121b5409936
-
openssh-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:e1d6a4dfefc86797fb35ef8f21d5f047090eea922706644a89ef3203efd7597e
-
openssh-askpass-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:71b593e38dc8a6139c1024a73ca72d33af3ae73ad3375f8baf550a34a7946eec
-
openssh-askpass-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:9a7d0eed987fa28986778d12a846da84ddab707e766493060420ac1f9fbf3544
-
openssh-clients-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:c6b0f8817fa0dd51af27ffd36c43afa811fd31167b9e369aecd8230cd7d9c04c
-
openssh-clients-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:6a6e91086f06865cade76fe72093470e9b0cca3f9ed7d578d18f30474caaa1ff
-
openssh-ldap-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:f97aa5680e237bb128ee4203c05dcab1da15ad093f1676fa6e94e4f20c5903fd
-
openssh-ldap-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:076f41d23cdb6505263c4936ad01438f167b2d76b35e02b6d45c8001a2ac6ff7
-
openssh-server-5.3p1-125.el6.tuxcare.els11.i686.rpm
sha:427f01b87551085926b0f483340bb0e366d3da0f032b61c2c9374cf212a86ec5
-
openssh-server-5.3p1-125.el6.tuxcare.els11.x86_64.rpm
sha:21f822511281f8bdb0cf27e8091bd9f0f6d6761b7177fa496ef861e65d9b9623
-
pam_ssh_agent_auth-0.9.3-125.el6.tuxcare.els11.i686.rpm
sha:c008a2a090f452dc817ad4061e18295712c2806a07356e2b846090b9647a1a1c
-
pam_ssh_agent_auth-0.9.3-125.el6.tuxcare.els11.x86_64.rpm
sha:054e0e0d7525ab0c73e7cbc64660ee79e9c9b36fd3b8c6d9ba75692ef28f0c23
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
