ELSA-2026-19219

Описание

[9.9p1-7.0.2]

• Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]

[9.9p1-7.0.1]

• Upstream references found with /usr/bin/ssh [Orabug: 37814929]

[9.9p1-7 + 0.10.4-9]

• Version bump

[9.9p1-5 + 0.10.4-8]

• CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155825
• Fix incorrect claim about SSH_AUTH_SOCK in pam_ssh_agent_auth manual page Resolves: RHEL-122302

[9.9p1-4]

• Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580

[9.9p1-3]

• Enable support for DSA keys Resolves: RHEL-127624
• CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959
• CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960

[9.9p1-2]

• Fix implicit destination path selection when source path ends with '..' Resolves: RHEL-119515
• Canonicalize username when matching a user Resolves: RHEL-118372

[9.9p1-1]

• Rebase to version 9.9 Resolves: RHEL-108912