Описание
ELSA-2026-85958: openssh security update (MODERATE)
[9.9p1-13.0.1]
- Restore pam_ssh_agent_rel values that were used for initial release
- Fix PerSourcePenalties grace-exceeded using the crash penalty value [Orabug: 39825354]
- Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]
- Upstream references found with /usr/bin/ssh [Orabug: 37814929]
[9.9p1-13]
- CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276221
- CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276234
- CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-276230
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
openssh
9.9p1-13.0.1.el9_8
openssh-askpass
9.9p1-13.0.1.el9_8
openssh-clients
9.9p1-13.0.1.el9_8
openssh-keycat
9.9p1-13.0.1.el9_8
openssh-server
9.9p1-13.0.1.el9_8
pam_ssh_agent_auth
0.10.4-9.13.0.1.el9_8
Oracle Linux x86_64
openssh
9.9p1-13.0.1.el9_8
openssh-askpass
9.9p1-13.0.1.el9_8
openssh-clients
9.9p1-13.0.1.el9_8
openssh-keycat
9.9p1-13.0.1.el9_8
openssh-server
9.9p1-13.0.1.el9_8
pam_ssh_agent_auth
0.10.4-9.13.0.1.el9_8
