ELSA-2026-47757

ELSA-2026-47757 - openssh security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-30

Description

[9.9p1-25.0.1]
- Upstream references found with /usr/bin/ssh [Orabug: 37824421]

[9.9p1-25]
- CVE-2026-59996: Fix remote glob result of '..' causing files to be placed
in unintended parent directories when scp performs remote-to-remote copy
via the local host
Resolves: RHEL-193170
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
Resolves: RHEL-193016

[9.9p1-24]
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
FIPS known-group validation that leads to client-side denial of service
Resolves: RHEL-186435
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
cleanup due to missing NULL terminator
Resolves: RHEL-185826
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
pre-binding
Resolves: RHEL-185852

Related CVEs

CVE-2026-55653

CVE-2026-55654

CVE-2026-55655

CVE-2026-59996

CVE-2026-60002

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	openssh-9.9p1-25.0.1.el10_2.src.rpm	a3d590090d70f32e39c1687c57ad7c1ae7b6029b6939031122d34d7e21b9072b	-	ol10_aarch64_appstream
	openssh-9.9p1-25.0.1.el10_2.src.rpm	a3d590090d70f32e39c1687c57ad7c1ae7b6029b6939031122d34d7e21b9072b	-	ol10_aarch64_baseos_latest
	openssh-9.9p1-25.0.1.el10_2.src.rpm	a3d590090d70f32e39c1687c57ad7c1ae7b6029b6939031122d34d7e21b9072b	-	ol10_aarch64_u2_baseos_patch
	openssh-9.9p1-25.0.1.el10_2.aarch64.rpm	ef5f4a34ff175d1d788d72002d99d27b3d1075206e62a3b9db203b412e41597a	-	ol10_aarch64_baseos_latest
	openssh-9.9p1-25.0.1.el10_2.aarch64.rpm	ef5f4a34ff175d1d788d72002d99d27b3d1075206e62a3b9db203b412e41597a	-	ol10_aarch64_u2_baseos_patch
	openssh-askpass-9.9p1-25.0.1.el10_2.aarch64.rpm	21d48f4ae0c04722d2a71e05f3620914f4fc97b141edd0e22e8f4560f7a870f8	-	ol10_aarch64_appstream
	openssh-clients-9.9p1-25.0.1.el10_2.aarch64.rpm	0dab29aef18d5e07c663e654979a6280206da4be797d39f5089438f39ecc177b	-	ol10_aarch64_baseos_latest
	openssh-clients-9.9p1-25.0.1.el10_2.aarch64.rpm	0dab29aef18d5e07c663e654979a6280206da4be797d39f5089438f39ecc177b	-	ol10_aarch64_u2_baseos_patch
	openssh-keycat-9.9p1-25.0.1.el10_2.aarch64.rpm	4093299957433662c645cba924051c262aca0bd58f7a8851e9f8b26b420461fd	-	ol10_aarch64_baseos_latest
	openssh-keycat-9.9p1-25.0.1.el10_2.aarch64.rpm	4093299957433662c645cba924051c262aca0bd58f7a8851e9f8b26b420461fd	-	ol10_aarch64_u2_baseos_patch
	openssh-keysign-9.9p1-25.0.1.el10_2.aarch64.rpm	8d77aff56a48dcc237f31d7c308037f271c597ed560a0e9b9811250c1434f9f1	-	ol10_aarch64_appstream
	openssh-server-9.9p1-25.0.1.el10_2.aarch64.rpm	eaf125f8edf8adf34c8f2d86440721249453a0115b186c01efe06f2e1daf9307	-	ol10_aarch64_baseos_latest
	openssh-server-9.9p1-25.0.1.el10_2.aarch64.rpm	eaf125f8edf8adf34c8f2d86440721249453a0115b186c01efe06f2e1daf9307	-	ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64)	openssh-9.9p1-25.0.1.el10_2.src.rpm	a3d590090d70f32e39c1687c57ad7c1ae7b6029b6939031122d34d7e21b9072b	-	ol10_x86_64_appstream
	openssh-9.9p1-25.0.1.el10_2.src.rpm	a3d590090d70f32e39c1687c57ad7c1ae7b6029b6939031122d34d7e21b9072b	-	ol10_x86_64_baseos_latest
	openssh-9.9p1-25.0.1.el10_2.src.rpm	a3d590090d70f32e39c1687c57ad7c1ae7b6029b6939031122d34d7e21b9072b	-	ol10_x86_64_u2_baseos_patch
	openssh-9.9p1-25.0.1.el10_2.x86_64.rpm	330824e694c36c8d7b27f4d4f6c5dbece17ad2886e23c6268ab1e3112eb66803	-	ol10_x86_64_baseos_latest
	openssh-9.9p1-25.0.1.el10_2.x86_64.rpm	330824e694c36c8d7b27f4d4f6c5dbece17ad2886e23c6268ab1e3112eb66803	-	ol10_x86_64_u2_baseos_patch
	openssh-askpass-9.9p1-25.0.1.el10_2.x86_64.rpm	e0dc9e9c98c287a79203b96f477f86aa40654c3b35fbc445b050b5381dfb417c	-	ol10_x86_64_appstream
	openssh-clients-9.9p1-25.0.1.el10_2.x86_64.rpm	d781fada0e689edef67b9f4544f21a514eb96c302d703fee016b05eddb42862c	-	ol10_x86_64_baseos_latest
	openssh-clients-9.9p1-25.0.1.el10_2.x86_64.rpm	d781fada0e689edef67b9f4544f21a514eb96c302d703fee016b05eddb42862c	-	ol10_x86_64_u2_baseos_patch
	openssh-keycat-9.9p1-25.0.1.el10_2.x86_64.rpm	d554f3084dc6bebd66d07c8611df4906a5de9a24ca48e1b2f857bbfedb3594b3	-	ol10_x86_64_baseos_latest
	openssh-keycat-9.9p1-25.0.1.el10_2.x86_64.rpm	d554f3084dc6bebd66d07c8611df4906a5de9a24ca48e1b2f857bbfedb3594b3	-	ol10_x86_64_u2_baseos_patch
	openssh-keysign-9.9p1-25.0.1.el10_2.x86_64.rpm	0609a65c28907ebb9842e2695e5d741989efe52f0ff7a06a44b13ac8c27e80ec	-	ol10_x86_64_appstream
	openssh-server-9.9p1-25.0.1.el10_2.x86_64.rpm	d7e48dbfd8e3b2d0f5e2ebaeedbde2de254f5e90cbc1c96eb647a2e6e047a7c0	-	ol10_x86_64_baseos_latest
	openssh-server-9.9p1-25.0.1.el10_2.x86_64.rpm	d7e48dbfd8e3b2d0f5e2ebaeedbde2de254f5e90cbc1c96eb647a2e6e047a7c0	-	ol10_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team