Описание
ELSA-2026-69266: openssh security, bug fix, and enhancement update (IMPORTANT)
[8.0p1-33.0.1]
- Update upstream references [Orabug: 36587718]
[8.0p1-33]
- CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257
[8.0p1-32]
- Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763
[8.0p1-31 + 0.10.3-8]
- CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324
- CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280
- Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
openssh
8.0p1-33.0.1.el8_10
openssh-askpass
8.0p1-33.0.1.el8_10
openssh-cavs
8.0p1-33.0.1.el8_10
openssh-clients
8.0p1-33.0.1.el8_10
openssh-keycat
8.0p1-33.0.1.el8_10
openssh-ldap
8.0p1-33.0.1.el8_10
openssh-server
8.0p1-33.0.1.el8_10
pam_ssh_agent_auth
0.10.3-8.33.0.1.el8_10
Oracle Linux x86_64
openssh
8.0p1-33.0.1.el8_10
openssh-askpass
8.0p1-33.0.1.el8_10
openssh-cavs
8.0p1-33.0.1.el8_10
openssh-clients
8.0p1-33.0.1.el8_10
openssh-keycat
8.0p1-33.0.1.el8_10
openssh-ldap
8.0p1-33.0.1.el8_10
openssh-server
8.0p1-33.0.1.el8_10
pam_ssh_agent_auth
0.10.3-8.33.0.1.el8_10
