[CLSA-2026:1792080315] openssh: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-20 14:10:19 UTC
Description:
- CVE-2026-106555: reset GSSAPI client state before each authentication attempt (upstream 670510d1) - CVE-2026-106553: store delegated GSSAPI credentials only after successful authorization (upstream 6f9cd19a) - CVE-2026-106583: disallow '$' and '\' in a command-line user name (upstream 0c4c9a7b) - CVE-2026-106585: reject decompressed packets exceeding the maximum packet size (upstream e0f85d83)
Updated packages:
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:4b3a10ad368dffbef1d0f841033300bf5b445053ff5cf90ac69e53d1793bebb6
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:e9132350f12e3be14aef4b713959be715cbd5a0401b0e0cbb9d408aded83d7af
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:2def27b8f95079049a275056034bd34e12635075bb5f7cddc8dd21786932580c
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:bd5766112043b9271aea7ea8cf5d729e0f53349b051b4be7c90d389502486dd9
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:7f54c22df8e2262be4d658f5b3c510306ceb76468779e01cefe7322ae30daada
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:3ad06e4179416bc7f0c8fd91e4076f16b44376a705508dd16b7eb10c3b066e6e
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:838718cfa9b8eced4d3c0d28400cdd93cf66a42906f6e11282f2b9dbc76006f3
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:f2e9e3ad179c0ab2c9277c45017dd1af16182e8bf0ea53eb569af3c1b7bd48f3
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:f8f51f00d3d6f29cc62451222d40da75fcbd9ace13b5ec8b78ed7ac9317b7608
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:e94a2f71767ef4731a595859fb73175cfbb5161f0c90da4a1c9c65d82f49104a
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:8378cc4c23e387a5a28d7d6d41676396155c837ac4ad5a4d6e45ddeabd8c6791
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:11e375146176198ec71b89dbf70876e63799cbda71dca6d8e41b771d0d47f512
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:cbdc4b7f6e3b446d12b980ed1426888226c5953ce51e04c5ad40fc713398ddcf
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:8d9717d95e74bdd78655cd4dec7540e710a5b9fb919f8b61c59c0beaf38b7cda
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:a2f2349a3d0fbc1dff8cea0031a9593542ee27325eb667ac733cae693ffafb09
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:43b4240e936572bf3b545acf57bfb1b2fd38e811a2aa39d3d037080ff45bbb1e
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:1ce4e5e92eb95d183549785fc6b82bf87bbb2ded41e8529ffb5a23aa2d317ccb
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:648ba4115692d0428cf2861397c9c6fa134fa98ebb258e204750d7e06acd2a13
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.