Oracle alert ELSA-2026-47757 (openssh)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-47757 Important: Oracle Linux 10 openssh security update | |
| Date: | Fri, 31 Jul 2026 15:44:54 -0700 | |
| Message-ID: | <mailman.310.1785537909.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-47757 http://linux.oracle.com/errata/ELSA-2026-47757.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: openssh-9.9p1-25.0.1.el10_2.x86_64.rpm openssh-askpass-9.9p1-25.0.1.el10_2.x86_64.rpm openssh-clients-9.9p1-25.0.1.el10_2.x86_64.rpm openssh-keycat-9.9p1-25.0.1.el10_2.x86_64.rpm openssh-keysign-9.9p1-25.0.1.el10_2.x86_64.rpm openssh-server-9.9p1-25.0.1.el10_2.x86_64.rpm aarch64: openssh-9.9p1-25.0.1.el10_2.aarch64.rpm openssh-askpass-9.9p1-25.0.1.el10_2.aarch64.rpm openssh-clients-9.9p1-25.0.1.el10_2.aarch64.rpm openssh-keycat-9.9p1-25.0.1.el10_2.aarch64.rpm openssh-keysign-9.9p1-25.0.1.el10_2.aarch64.rpm openssh-server-9.9p1-25.0.1.el10_2.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/openssh-9.9p1-25... Related CVEs: CVE-2026-55653 CVE-2026-55654 CVE-2026-55655 CVE-2026-59996 CVE-2026-60002 Description of changes: [9.9p1-25.0.1] - Upstream references found with /usr/bin/ssh [Orabug: 37824421] [9.9p1-25] - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193170 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193016 [9.9p1-24] - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186435 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185826 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185852 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata