Release date:
2026-07-17 05:57:36 UTC
Description:
- CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in
server_request_tun() (upstream 8dfe7ed6)
- CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by
finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS
(upstream 5d04ca6a)
Updated packages:
-
openssh-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:ff7cdc4d1b28b179fb664ea81f531fb2e19a10c258343b0984fc5f79ccdecb06
-
openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:413454908cd84a02c9fecfc28270b1f1b5445b90d194beb60583aae7110e09be
-
openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:bfadd130aa5360f934a2b974a0745810de6de4191aeba54dc7061dc3f28a36be
-
openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:272b1e053476f2e401562c5e72e325716472b70bd49a9b6b81c30dfb4d98abde
-
openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:bd35938079fc20be186f21592a2bf250adc4a78f405cab7c864da5735907a46b
-
openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:26e385dd1b766a2b1398f5ca21b8a946e322b2c1ff419ac0f0270e5365d065cc
-
openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:ca72679939c7b679a0702291ef5c090dfdd7e4fd6b92d0b2529b7dbf8e90e5ba
-
openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:f82bd2353dce8f64437d9bc094e765667d91e205745ba9b6fa14882252f75825
-
pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els2.x86_64.rpm
sha:4e7b658cee6c8b6b319fb2e61b13b5a0f09092cc082563f272b612287c5b0cfe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
