Описание
ELSA-2026-13383: openssh security update (IMPORTANT)
[8.0p1-29.0.1]
- Update upstream references [Orabug: 36587718]
[8.0p1-29]
- CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224
- CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192
- CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
openssh
8.0p1-29.0.1.el8_10
openssh-askpass
8.0p1-29.0.1.el8_10
openssh-cavs
8.0p1-29.0.1.el8_10
openssh-clients
8.0p1-29.0.1.el8_10
openssh-keycat
8.0p1-29.0.1.el8_10
openssh-ldap
8.0p1-29.0.1.el8_10
openssh-server
8.0p1-29.0.1.el8_10
pam_ssh_agent_auth
0.10.3-7.29.0.1.el8_10
Oracle Linux x86_64
openssh
8.0p1-29.0.1.el8_10
openssh-askpass
8.0p1-29.0.1.el8_10
openssh-cavs
8.0p1-29.0.1.el8_10
openssh-clients
8.0p1-29.0.1.el8_10
openssh-keycat
8.0p1-29.0.1.el8_10
openssh-ldap
8.0p1-29.0.1.el8_10
openssh-server
8.0p1-29.0.1.el8_10
pam_ssh_agent_auth
0.10.3-7.29.0.1.el8_10
