Описание
ELSA-2026-47755: openssh security update (MODERATE)
[8.0p1-30.0.1]
- Update upstream references [Orabug: 36587718]
[8.0p1-30]
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
openssh
8.0p1-30.0.1.el8_10
openssh-askpass
8.0p1-30.0.1.el8_10
openssh-cavs
8.0p1-30.0.1.el8_10
openssh-clients
8.0p1-30.0.1.el8_10
openssh-keycat
8.0p1-30.0.1.el8_10
openssh-ldap
8.0p1-30.0.1.el8_10
openssh-server
8.0p1-30.0.1.el8_10
pam_ssh_agent_auth
0.10.3-7.30.0.1.el8_10
Oracle Linux x86_64
openssh
8.0p1-30.0.1.el8_10
openssh-askpass
8.0p1-30.0.1.el8_10
openssh-cavs
8.0p1-30.0.1.el8_10
openssh-clients
8.0p1-30.0.1.el8_10
openssh-keycat
8.0p1-30.0.1.el8_10
openssh-ldap
8.0p1-30.0.1.el8_10
openssh-server
8.0p1-30.0.1.el8_10
pam_ssh_agent_auth
0.10.3-7.30.0.1.el8_10
Связанные CVE
Связанные уязвимости
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.