Release date:
2026-07-23 22:39:13 UTC
Description:
- CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in
server_request_tun() (upstream 8dfe7ed6)
- CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by
finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS
(upstream 5d04ca6a)
Updated packages:
-
openssh-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:5c1dcc2e4eef5d64b6e1d3010e963794582fb2be9341d5778764232f2d940564
-
openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:898c45d1e1e3f2b74cdd472a47f91f79fc756ac2abe5bf49a61358593dde6e95
-
openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:945886ed14a869509df3769d09476638fbf477900b7c8b7e62be42f7cb2bdd8f
-
openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:523b46a34c123aa3164fdf6b54926b41860e156a14d9dd982607350ababc5ebf
-
openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:6ae172a22b7739fb7ef928573e0107a72c992f8192927f7da161d927c943487d
-
openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:8b5e188875d0a3a4d8605e08fda8baca1568bb3efbbecb1cfcf50c2dcd7be511
-
openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:19d6064b345ede531623052ca7e1f537550ae04613c1847e0033e8d0c02eea77
-
openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:206f03ef5ec0969cfc19113999313aa9dcd26c058b864c0f2e1d0fc90eae1cd8
-
pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els7.i686.rpm
sha:a2820ef4581360ac6fb90f3924c7aaeaa369c7e1ed5078b46a5c173c0f12bb1e
-
pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:dbd5612d5dd3df1df2be201da09af7cfd7579e563585d71117bb4b2684a59202
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
