ELSA-2026-73955

Опубликовано: 01 окт. 2026

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2026-73955: openssh security update (MODERATE)

[9.9p1-12.0.1]

Restore pam_ssh_agent_rel values that were used for initial release
Fix PerSourcePenalties grace-exceeded using the crash penalty value [Orabug: 39825354]
Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]
Upstream references found with /usr/bin/ssh [Orabug: 37814929]

[9.9p1-12]

CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258461

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

openssh

9.9p1-12.0.1.el9_8

openssh-askpass

9.9p1-12.0.1.el9_8

openssh-clients

9.9p1-12.0.1.el9_8

openssh-keycat

9.9p1-12.0.1.el9_8

openssh-server

9.9p1-12.0.1.el9_8

pam_ssh_agent_auth

0.10.4-9.12.0.1.el9_8

Oracle Linux x86_64

openssh

9.9p1-12.0.1.el9_8

openssh-askpass

9.9p1-12.0.1.el9_8

openssh-clients

9.9p1-12.0.1.el9_8

openssh-keycat

9.9p1-12.0.1.el9_8

openssh-server

9.9p1-12.0.1.el9_8

pam_ssh_agent_auth

0.10.4-9.12.0.1.el9_8

Связанные CVE

CVE-2026-60001

Ссылки на источники

Связанные уязвимости

CVE-2026-60001

CVSS3: 6.5

ubuntu

4 месяца назад

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

CVE-2026-60001

CVSS3: 6.5

redhat

4 месяца назад

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

CVE-2026-60001

CVSS3: 6.5

nvd

4 месяца назад

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

CVE-2026-60001

CVSS3: 6.5

msrc

4 месяца назад

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

CVE-2026-60001

CVSS3: 6.5

debian

4 месяца назад

sshd in OpenSSH before 10.4 does not always honor the minimum authenti ...