Release date:
2026-07-23 22:42:02 UTC
Description:
- CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in
server_request_tun() (upstream 8dfe7ed6)
- CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by
finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS
(upstream 5d04ca6a)
Updated packages:
-
openssh-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:4e1e889ea83057ac8d656a42691597ec8b6f46075c2d1df82ef57c664219a3cd
-
openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:9e868c3ef8c067d1cdd5c491e5e3c2a451c492c06612ab669bd1e8447a2ddc02
-
openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:f1b813a47c3f5bd144f012b5ecfde9a4061ba23b12d02e84e0deb91181b7e01c
-
openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:c792648d2460bede3df5600f24b78c96a85fce461e939aca4ade1d6798d99dbb
-
openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:123f69e0b6d861ce9c52b758100d94f304cdaf27abb76f408392d526ead93285
-
openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:a3aca38d55be25b0907dbe2c6746cd566a7958b9719c9aa20546c9eb3bfb1e59
-
openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:b233b49521b9a87d52814ce2b79bdcd432a2ce6e99b07726405e780a3a9905e2
-
openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:1c0c1e882f2bd95cca6a5fff2e8d1b68dd1c952d0918648d03bf4e0a374c5a06
-
pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els7.i686.rpm
sha:b2829f43108efc02adb114e20b07ad086d669b8f8eaa205c8c33cd6f10c48e85
-
pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els7.x86_64.rpm
sha:95a40ca5b1ddae70810207f21977daa9464610da932752fc91214673e913dca5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
