[CLSA-2026:1792159189] Fix CVE(s): CVE-2026-106553, CVE-2026-106555, CVE-2026-106583
Type:
security
Severity:
Important
Release date:
2026-10-16 14:00:03 UTC
Description:
* SECURITY UPDATE: GSSAPI authentication state persisted across attempts - debian/patches/CVE-2026-106555.patch: reset the global GSSAPI client state at the start of each authentication request and GSSAPI context setup, except for gssapi-keyex and post-authentication re-keying. - CVE-2026-106555 * SECURITY UPDATE: GSSAPI credentials stored after failed authentication - debian/patches/CVE-2026-106553.patch: only store delegated GSSAPI credentials when the GSSAPI client was authorized. - CVE-2026-106553 * SECURITY UPDATE: injection via command-line username - debian/patches/CVE-2026-106583.patch: disallow '$' and '\' in a command-line supplied username. - CVE-2026-106583
CVEs fixed:
Updated packages:
  • openssh-client_8.4p1-5+deb11u7+tuxcare.els4_amd64.deb
    sha:19b0d644b7f0f9027a0643d1b2e031896f290e3c
  • openssh-server_8.4p1-5+deb11u7+tuxcare.els4_amd64.deb
    sha:052a79db650a6db1adb6904a4d5f5e7c0e46c360
  • openssh-sftp-server_8.4p1-5+deb11u7+tuxcare.els4_amd64.deb
    sha:ce4844f00ecb5b5346e33b3d0d0678cf7e48798f
  • openssh-tests_8.4p1-5+deb11u7+tuxcare.els4_amd64.deb
    sha:7dc9d441c4ac99d25fcc7c8a5d8ddddc71417b1d
  • ssh_8.4p1-5+deb11u7+tuxcare.els4_all.deb
    sha:b60c7243b235052ceb71798a80dbda2cab6527f7
  • ssh-askpass-gnome_8.4p1-5+deb11u7+tuxcare.els4_amd64.deb
    sha:e8ce0b7cba0da82d1a23ad3975f97f13f7a516a3
  • openssh-client_8.4p1-5+deb11u7+tuxcare.els4_arm64.deb
    sha:ea765a86285e633c721239db05e2aade4442f181
  • openssh-server_8.4p1-5+deb11u7+tuxcare.els4_arm64.deb
    sha:9526edcff477933ec5dbc25e8e6f198d4810e5a4
  • openssh-sftp-server_8.4p1-5+deb11u7+tuxcare.els4_arm64.deb
    sha:6847012b405a79061b772300121c0ac126975936
  • openssh-tests_8.4p1-5+deb11u7+tuxcare.els4_arm64.deb
    sha:331e3bb7243ada04da3ca2673c43faddd18b48a3
  • ssh-askpass-gnome_8.4p1-5+deb11u7+tuxcare.els4_arm64.deb
    sha:0d0d485649198034792b31268f8b2084b8bd4fc2
  • openssh-client_8.4p1-5+deb11u7+tuxcare.els4_armel.deb
    sha:4079da37b2fd11b55dc3e215980af96f629d0b85
  • openssh-server_8.4p1-5+deb11u7+tuxcare.els4_armel.deb
    sha:67304d8887e8ccb5436a0eb03c507d3cb649e99f
  • openssh-sftp-server_8.4p1-5+deb11u7+tuxcare.els4_armel.deb
    sha:67e8e8fd11a8fd64bb6bc5799b69470a694e1797
  • openssh-tests_8.4p1-5+deb11u7+tuxcare.els4_armel.deb
    sha:fb4568f6c988a02c1333079832c516b765f34b1c
  • ssh-askpass-gnome_8.4p1-5+deb11u7+tuxcare.els4_armel.deb
    sha:c1de065ab37148226d1f7f652d03de739fe18025
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.