ELSA-2026-73954

ELSA-2026-73954 - openssh security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-10-05

Description


[9.9p1-28.0.1]
- Upstream references found with /usr/bin/ssh [Orabug: 37824421]

[9.9p1-28]
- CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
authentication where the minimum per-attempt delay was not being enforced
Resolves: RHEL-258463


Related CVEs


CVE-2026-60001

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) openssh-9.9p1-28.0.1.el10_2.src.rpm96636a21cbd58e6b0315bdadcabcf17f35e3173e037795ebf1baa650ee51d9eb-ol10_aarch64_appstream
openssh-9.9p1-28.0.1.el10_2.src.rpm96636a21cbd58e6b0315bdadcabcf17f35e3173e037795ebf1baa650ee51d9eb-ol10_aarch64_baseos_latest
openssh-9.9p1-28.0.1.el10_2.src.rpm96636a21cbd58e6b0315bdadcabcf17f35e3173e037795ebf1baa650ee51d9eb-ol10_aarch64_u2_baseos_patch
openssh-9.9p1-28.0.1.el10_2.aarch64.rpmd50a4077c2a9cbf563d4a7f3fe26a5fa628e45260331505a0b9bdf273adb9382-ol10_aarch64_baseos_latest
openssh-9.9p1-28.0.1.el10_2.aarch64.rpmd50a4077c2a9cbf563d4a7f3fe26a5fa628e45260331505a0b9bdf273adb9382-ol10_aarch64_u2_baseos_patch
openssh-askpass-9.9p1-28.0.1.el10_2.aarch64.rpma4ea91b2276bf1d84494e0d3d93152042c9c4daf49f19b0dcd6d5783410ad95d-ol10_aarch64_appstream
openssh-clients-9.9p1-28.0.1.el10_2.aarch64.rpm86b3f802d1798d532e57471299c5b82625b87163449443e5ef76ad68daec5b78-ol10_aarch64_baseos_latest
openssh-clients-9.9p1-28.0.1.el10_2.aarch64.rpm86b3f802d1798d532e57471299c5b82625b87163449443e5ef76ad68daec5b78-ol10_aarch64_u2_baseos_patch
openssh-keycat-9.9p1-28.0.1.el10_2.aarch64.rpmfd207c8dbd386179e68db679bacf91b9b294eae1e09d638e6546c2b1586a02a1-ol10_aarch64_baseos_latest
openssh-keycat-9.9p1-28.0.1.el10_2.aarch64.rpmfd207c8dbd386179e68db679bacf91b9b294eae1e09d638e6546c2b1586a02a1-ol10_aarch64_u2_baseos_patch
openssh-keysign-9.9p1-28.0.1.el10_2.aarch64.rpm7b891efe04a2cbf967bc4059d45fcbf85ead360e11183bebee6252e6787c352f-ol10_aarch64_appstream
openssh-server-9.9p1-28.0.1.el10_2.aarch64.rpm14df0481108c40eeccc5905e2235df856ff8e8fb9679df1cd4669f3f8e3e2e32-ol10_aarch64_baseos_latest
openssh-server-9.9p1-28.0.1.el10_2.aarch64.rpm14df0481108c40eeccc5905e2235df856ff8e8fb9679df1cd4669f3f8e3e2e32-ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64) openssh-9.9p1-28.0.1.el10_2.src.rpm96636a21cbd58e6b0315bdadcabcf17f35e3173e037795ebf1baa650ee51d9eb-ol10_x86_64_appstream
openssh-9.9p1-28.0.1.el10_2.src.rpm96636a21cbd58e6b0315bdadcabcf17f35e3173e037795ebf1baa650ee51d9eb-ol10_x86_64_baseos_latest
openssh-9.9p1-28.0.1.el10_2.src.rpm96636a21cbd58e6b0315bdadcabcf17f35e3173e037795ebf1baa650ee51d9eb-ol10_x86_64_u2_baseos_patch
openssh-9.9p1-28.0.1.el10_2.x86_64.rpm8f77feb42adc48573f1c5ac5f6755180a5077a167710b29b789942353a424962-ol10_x86_64_baseos_latest
openssh-9.9p1-28.0.1.el10_2.x86_64.rpm8f77feb42adc48573f1c5ac5f6755180a5077a167710b29b789942353a424962-ol10_x86_64_u2_baseos_patch
openssh-askpass-9.9p1-28.0.1.el10_2.x86_64.rpm59528f8e3ef2ddc537fed45e3f7230e2645433ad546f418fe413ecd013e2a932-ol10_x86_64_appstream
openssh-clients-9.9p1-28.0.1.el10_2.x86_64.rpm8ffc835497bba25205db7771ea6155310842a9c6ae321fed04aef25db83854ef-ol10_x86_64_baseos_latest
openssh-clients-9.9p1-28.0.1.el10_2.x86_64.rpm8ffc835497bba25205db7771ea6155310842a9c6ae321fed04aef25db83854ef-ol10_x86_64_u2_baseos_patch
openssh-keycat-9.9p1-28.0.1.el10_2.x86_64.rpmd9f1583334803a6f601c9cbe76485508cc0a5ffd8a2cd8ef684d4e709c5221a6-ol10_x86_64_baseos_latest
openssh-keycat-9.9p1-28.0.1.el10_2.x86_64.rpmd9f1583334803a6f601c9cbe76485508cc0a5ffd8a2cd8ef684d4e709c5221a6-ol10_x86_64_u2_baseos_patch
openssh-keysign-9.9p1-28.0.1.el10_2.x86_64.rpm90f63177d8a61697963cf08c3d23b52b213fadb32638152a75d56a49dc7b554c-ol10_x86_64_appstream
openssh-server-9.9p1-28.0.1.el10_2.x86_64.rpmb14a10b4edb3137508c9a84d44e5293b10c148feaaa57a667fb8e177c835dc1f-ol10_x86_64_baseos_latest
openssh-server-9.9p1-28.0.1.el10_2.x86_64.rpmb14a10b4edb3137508c9a84d44e5293b10c148feaaa57a667fb8e177c835dc1f-ol10_x86_64_u2_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete