[CLSA-2026:1792081157] openssh: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-20 14:12:56 UTC
Description:
- CVE-2026-106555: reset GSSAPI client state before each authentication attempt (upstream 670510d1) - CVE-2026-106553: store delegated GSSAPI credentials only after successful authorization (upstream 6f9cd19a) - CVE-2026-106583: disallow '$' and '\' in a command-line user name (upstream 0c4c9a7b) - CVE-2026-106585: reject decompressed packets exceeding the maximum packet size (upstream e0f85d83)
Updated packages:
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:41682087519042093822f6ef1abdeaf182e5eb6936990685f7a27d12c08626ce
  • openssh-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:edb95ca6d1c449ff502b4116f8cdb824382162b195fa75054e8fb12c603dcfca
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:f54533b722020558f824980b36218c5314364c7c2913bfc7d444976a69bfa18c
  • openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:7da128fa07095ca13bd0393174c5d27936bb0fea06878493489d88c373c17f77
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:620da9818f793a7b4b86cc907c6de4601087f00d3e649e999a3ee9f01b820070
  • openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:cf9918c4db986ce358a544c657abb0ea835285d70c44bca5ca53ccfc31c5798a
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:a764adf73823db2de4e5236ca479c187e78cc2081c8acf5c3c71ec2f33219445
  • openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:0a62a66dc2b14d3100b67b474488cf456c207496f91bf558b01cc7e461108753
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:98379fd57d109d9c5ce1d8d71fc04d1c7a48fa1286228127d7ffb6c39ac21c36
  • openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:48db2b134c9af5528cb39c49cfaa03e9813fed1995353ddb6b4e7050cc89e738
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:97682b564d0f4e65f918d6ba193c0cd5e50474d0240dad6378a5e650da2754d6
  • openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:0dd0c4fd9f20d443b4144e9b6ae4d043901b738077fa77559e54af76b0b28489
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:482f45a9023018e7b2d267eacedc1b13e70146929dea31b5de0f2fcb5f763bbe
  • openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:98477d54bd38bc16772bab35b8fd049dffdb05d344bd31914b95db388a347059
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:7b5f49fc17a73ea301e27d1b5cc368665ed3dbdfee82ddebda8f7984428fda65
  • openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:5ff9c8ac9425282d943b9f152b2c4e7df1aa709d56d88f0b3b16db3371053eb2
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.i686.rpm
    sha:420c13511f2080bf7c46064f23388d4e96557924846b9c165fad4e2ef4f74647
  • pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els3.x86_64.rpm
    sha:ae5df7332936b0e4de44700764511c73ed30651fa57ef4c998cea8cad63f07da
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.