ELSA-2026-47756

ELSA-2026-47756 - openssh security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-06

Description

[9.9p1-9.0.1]
- Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]
- Upstream references found with /usr/bin/ssh [Orabug: 37814929]

[9.9p1-9]
- CVE-2026-59996: Fix remote glob result of '..' causing files to be placed
in unintended parent directories when scp performs remote-to-remote copy
via the local host
Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
Resolves: RHEL-193024

[9.9p1-8]
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
FIPS known-group validation that leads to client-side denial of service
Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
cleanup due to missing NULL terminator
Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
pre-binding
Resolves: RHEL-185854

Related CVEs

CVE-2026-55653

CVE-2026-55654

CVE-2026-55655

CVE-2026-59996

CVE-2026-60002

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssh-9.9p1-9.0.1.el9_8.src.rpm	22edf64aabc417d200884e928d215b1926a2b57d96f967aee2caeef29fada1b7	-	ol9_aarch64_appstream
	openssh-9.9p1-9.0.1.el9_8.src.rpm	22edf64aabc417d200884e928d215b1926a2b57d96f967aee2caeef29fada1b7	-	ol9_aarch64_baseos_latest
	openssh-9.9p1-9.0.1.el9_8.src.rpm	22edf64aabc417d200884e928d215b1926a2b57d96f967aee2caeef29fada1b7	-	ol9_aarch64_u8_baseos_patch
	openssh-9.9p1-9.0.1.el9_8.aarch64.rpm	043abecf9ba3496e87f4007e55c1bd0b45bf2754430844c0dc6f3752dbd1d64e	-	ol9_aarch64_baseos_latest
	openssh-9.9p1-9.0.1.el9_8.aarch64.rpm	043abecf9ba3496e87f4007e55c1bd0b45bf2754430844c0dc6f3752dbd1d64e	-	ol9_aarch64_u8_baseos_patch
	openssh-askpass-9.9p1-9.0.1.el9_8.aarch64.rpm	66cd9d7139c3d16be1d968e22641463ba317d3a3ba69b092cbf675f445332d47	-	ol9_aarch64_appstream
	openssh-clients-9.9p1-9.0.1.el9_8.aarch64.rpm	ec4c25993d6d0170d9589e7512049c9d9ed8d1e62e8dc327887c053e9611ea54	-	ol9_aarch64_baseos_latest
	openssh-clients-9.9p1-9.0.1.el9_8.aarch64.rpm	ec4c25993d6d0170d9589e7512049c9d9ed8d1e62e8dc327887c053e9611ea54	-	ol9_aarch64_u8_baseos_patch
	openssh-keycat-9.9p1-9.0.1.el9_8.aarch64.rpm	ed5f3dcae47b0303f83b9e212736ce304b237bb46cb1f34761a5ba4f0aa1374d	-	ol9_aarch64_baseos_latest
	openssh-keycat-9.9p1-9.0.1.el9_8.aarch64.rpm	ed5f3dcae47b0303f83b9e212736ce304b237bb46cb1f34761a5ba4f0aa1374d	-	ol9_aarch64_u8_baseos_patch
	openssh-server-9.9p1-9.0.1.el9_8.aarch64.rpm	8618bdf1cd75796934f346e9c9721cd015cbac39c47d5d0639f3b3e72d10d76b	-	ol9_aarch64_baseos_latest
	openssh-server-9.9p1-9.0.1.el9_8.aarch64.rpm	8618bdf1cd75796934f346e9c9721cd015cbac39c47d5d0639f3b3e72d10d76b	-	ol9_aarch64_u8_baseos_patch
	pam_ssh_agent_auth-0.10.4-7.9.0.1.el9_8.aarch64.rpm	67189af527d6318659ca9279dfbed327ca262ff14de3527cff051589b3acb007	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	openssh-9.9p1-9.0.1.el9_8.src.rpm	22edf64aabc417d200884e928d215b1926a2b57d96f967aee2caeef29fada1b7	-	ol9_x86_64_appstream
	openssh-9.9p1-9.0.1.el9_8.src.rpm	22edf64aabc417d200884e928d215b1926a2b57d96f967aee2caeef29fada1b7	-	ol9_x86_64_baseos_latest
	openssh-9.9p1-9.0.1.el9_8.src.rpm	22edf64aabc417d200884e928d215b1926a2b57d96f967aee2caeef29fada1b7	-	ol9_x86_64_u8_baseos_patch
	openssh-9.9p1-9.0.1.el9_8.x86_64.rpm	c618257cb0c15189d2f3334f8c107f701f46ed5105c649c25e73bf30d1c16195	-	ol9_x86_64_baseos_latest
	openssh-9.9p1-9.0.1.el9_8.x86_64.rpm	c618257cb0c15189d2f3334f8c107f701f46ed5105c649c25e73bf30d1c16195	-	ol9_x86_64_u8_baseos_patch
	openssh-askpass-9.9p1-9.0.1.el9_8.x86_64.rpm	ad912f1ee0c478a23a8865049acafa18a85780990aee40961af189eea3d7d8e2	-	ol9_x86_64_appstream
	openssh-clients-9.9p1-9.0.1.el9_8.x86_64.rpm	e5c8016331c61460b9d967adc5931fda0d02d2f9e3bda01f56c0d83946cdadf3	-	ol9_x86_64_baseos_latest
	openssh-clients-9.9p1-9.0.1.el9_8.x86_64.rpm	e5c8016331c61460b9d967adc5931fda0d02d2f9e3bda01f56c0d83946cdadf3	-	ol9_x86_64_u8_baseos_patch
	openssh-keycat-9.9p1-9.0.1.el9_8.x86_64.rpm	b03cdd9bb8537552e9625ac69ec8804f46115f9ab2149c67cad402294c81d2d4	-	ol9_x86_64_baseos_latest
	openssh-keycat-9.9p1-9.0.1.el9_8.x86_64.rpm	b03cdd9bb8537552e9625ac69ec8804f46115f9ab2149c67cad402294c81d2d4	-	ol9_x86_64_u8_baseos_patch
	openssh-server-9.9p1-9.0.1.el9_8.x86_64.rpm	79bf15c9eb5d145bc0b46a38954cccd84bb7559f06015f33608a1cf7c998b1da	-	ol9_x86_64_baseos_latest
	openssh-server-9.9p1-9.0.1.el9_8.x86_64.rpm	79bf15c9eb5d145bc0b46a38954cccd84bb7559f06015f33608a1cf7c998b1da	-	ol9_x86_64_u8_baseos_patch
	pam_ssh_agent_auth-0.10.4-7.9.0.1.el9_8.x86_64.rpm	b8d32deed28f145c9704479167ed3d472172c5f671e34cc2cd75c5c1d70efa44	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team