ELSA-2026-69266

ELSA-2026-69266 - openssh security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-23

Description

[8.0p1-33.0.1]
- Update upstream references [Orabug: 36587718]

[8.0p1-33]
- CVE-2026-73282: Fix information disclosure and data corruption
via use-after-free in ssh client
Resolves: RHEL-248257

[8.0p1-32]
- Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen()
Related: RHEL-234763

[8.0p1-31 + 0.10.3-8]
- CVE-2026-59995: Fix sftp download to server-controlled path when
performing download on the commandline
Resolves: RHEL-236324
- CVE-2026-59999: Fix DisableForwarding=yes not overriding
PermitTunnel=yes
Resolves: RHEL-236280
- Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen()
Resolves: RHEL-234763

Related CVEs

CVE-2026-59995

CVE-2026-59999

CVE-2026-73282

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	openssh-8.0p1-33.0.1.el8_10.src.rpm	b4245b5fe99f9cc40d8e1d92570134dde0d7679e0fde00c8e0ec3b2d811e772e	-	ol8_aarch64_appstream
	openssh-8.0p1-33.0.1.el8_10.src.rpm	b4245b5fe99f9cc40d8e1d92570134dde0d7679e0fde00c8e0ec3b2d811e772e	-	ol8_aarch64_baseos_latest
	openssh-8.0p1-33.0.1.el8_10.src.rpm	b4245b5fe99f9cc40d8e1d92570134dde0d7679e0fde00c8e0ec3b2d811e772e	-	ol8_aarch64_u10_baseos_patch
	openssh-8.0p1-33.0.1.el8_10.aarch64.rpm	0643b486a0039d0ec010e73cccec29f4f61713a4ea5aade3acdce438199b60c8	-	ol8_aarch64_baseos_latest
	openssh-8.0p1-33.0.1.el8_10.aarch64.rpm	0643b486a0039d0ec010e73cccec29f4f61713a4ea5aade3acdce438199b60c8	-	ol8_aarch64_u10_baseos_patch
	openssh-askpass-8.0p1-33.0.1.el8_10.aarch64.rpm	0eb27c92c12354fc83f56451f7b98290b5b275ce83d0beb497424c7f64d17576	-	ol8_aarch64_appstream
	openssh-cavs-8.0p1-33.0.1.el8_10.aarch64.rpm	dfc8063595018806d2fc07ef79bd1162d3fc579a9b22884912eb4ae3ee6a42e8	-	ol8_aarch64_baseos_latest
	openssh-cavs-8.0p1-33.0.1.el8_10.aarch64.rpm	dfc8063595018806d2fc07ef79bd1162d3fc579a9b22884912eb4ae3ee6a42e8	-	ol8_aarch64_u10_baseos_patch
	openssh-clients-8.0p1-33.0.1.el8_10.aarch64.rpm	aee5876498d197e1dcee8d8710c5b82f506006e1dee3b52736ead61b21cf8d41	-	ol8_aarch64_baseos_latest
	openssh-clients-8.0p1-33.0.1.el8_10.aarch64.rpm	aee5876498d197e1dcee8d8710c5b82f506006e1dee3b52736ead61b21cf8d41	-	ol8_aarch64_u10_baseos_patch
	openssh-keycat-8.0p1-33.0.1.el8_10.aarch64.rpm	d7b5374dcb9406ff8389146b1ae572e61409411bfe7636169524af656805f156	-	ol8_aarch64_baseos_latest
	openssh-keycat-8.0p1-33.0.1.el8_10.aarch64.rpm	d7b5374dcb9406ff8389146b1ae572e61409411bfe7636169524af656805f156	-	ol8_aarch64_u10_baseos_patch
	openssh-ldap-8.0p1-33.0.1.el8_10.aarch64.rpm	e29e69c8b21cef7a08b1b0fc34fcbe2c8c12164b8d7fc8f28a3bc3fd0f13ae80	-	ol8_aarch64_baseos_latest
	openssh-ldap-8.0p1-33.0.1.el8_10.aarch64.rpm	e29e69c8b21cef7a08b1b0fc34fcbe2c8c12164b8d7fc8f28a3bc3fd0f13ae80	-	ol8_aarch64_u10_baseos_patch
	openssh-server-8.0p1-33.0.1.el8_10.aarch64.rpm	1874cc3ea56a061c17113dd610624345a7c691b5158773488003359d489aa54b	-	ol8_aarch64_baseos_latest
	openssh-server-8.0p1-33.0.1.el8_10.aarch64.rpm	1874cc3ea56a061c17113dd610624345a7c691b5158773488003359d489aa54b	-	ol8_aarch64_u10_baseos_patch
	pam_ssh_agent_auth-0.10.3-8.33.0.1.el8_10.aarch64.rpm	df0d35cac35635963535fb42ba942ed3710987859b4e9eac847453f1199b6df3	-	ol8_aarch64_baseos_latest
	pam_ssh_agent_auth-0.10.3-8.33.0.1.el8_10.aarch64.rpm	df0d35cac35635963535fb42ba942ed3710987859b4e9eac847453f1199b6df3	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	openssh-8.0p1-33.0.1.el8_10.src.rpm	b4245b5fe99f9cc40d8e1d92570134dde0d7679e0fde00c8e0ec3b2d811e772e	-	ol8_x86_64_appstream
	openssh-8.0p1-33.0.1.el8_10.src.rpm	b4245b5fe99f9cc40d8e1d92570134dde0d7679e0fde00c8e0ec3b2d811e772e	-	ol8_x86_64_baseos_latest
	openssh-8.0p1-33.0.1.el8_10.src.rpm	b4245b5fe99f9cc40d8e1d92570134dde0d7679e0fde00c8e0ec3b2d811e772e	-	ol8_x86_64_u10_baseos_patch
	openssh-8.0p1-33.0.1.el8_10.x86_64.rpm	d415eb9f2365dcc65efc50ee00e92b14221617fbb12901a7dc3eb51668968a25	-	ol8_x86_64_baseos_latest
	openssh-8.0p1-33.0.1.el8_10.x86_64.rpm	d415eb9f2365dcc65efc50ee00e92b14221617fbb12901a7dc3eb51668968a25	-	ol8_x86_64_u10_baseos_patch
	openssh-askpass-8.0p1-33.0.1.el8_10.x86_64.rpm	4ba5dec3dec4433cdbd3ee67f332a38c4f977b46d1c50102fb70cba6b78ff91c	-	ol8_x86_64_appstream
	openssh-cavs-8.0p1-33.0.1.el8_10.x86_64.rpm	ca028f15f061c95f30b527b2810bdd5f610d0dceae0ace32e6c66d53e033bf17	-	ol8_x86_64_baseos_latest
	openssh-cavs-8.0p1-33.0.1.el8_10.x86_64.rpm	ca028f15f061c95f30b527b2810bdd5f610d0dceae0ace32e6c66d53e033bf17	-	ol8_x86_64_u10_baseos_patch
	openssh-clients-8.0p1-33.0.1.el8_10.x86_64.rpm	798778f3d08e05dce9ce87c6490e2ae125bef5710368f0f2d3d08826cc96fe66	-	ol8_x86_64_baseos_latest
	openssh-clients-8.0p1-33.0.1.el8_10.x86_64.rpm	798778f3d08e05dce9ce87c6490e2ae125bef5710368f0f2d3d08826cc96fe66	-	ol8_x86_64_u10_baseos_patch
	openssh-keycat-8.0p1-33.0.1.el8_10.x86_64.rpm	484613f94bdce8f20516a0a9f177e2dd77cdcec04ea1dba5fb7b7ef256fc7252	-	ol8_x86_64_baseos_latest
	openssh-keycat-8.0p1-33.0.1.el8_10.x86_64.rpm	484613f94bdce8f20516a0a9f177e2dd77cdcec04ea1dba5fb7b7ef256fc7252	-	ol8_x86_64_u10_baseos_patch
	openssh-ldap-8.0p1-33.0.1.el8_10.x86_64.rpm	cedb1496cd1a2471eb30a50d0262790ee60116ae4df241eb28d7f69634dab7cb	-	ol8_x86_64_baseos_latest
	openssh-ldap-8.0p1-33.0.1.el8_10.x86_64.rpm	cedb1496cd1a2471eb30a50d0262790ee60116ae4df241eb28d7f69634dab7cb	-	ol8_x86_64_u10_baseos_patch
	openssh-server-8.0p1-33.0.1.el8_10.x86_64.rpm	9f5378db6016444130e67a35144baae0fa8c7681df3b765c8e101debb4faeb00	-	ol8_x86_64_baseos_latest
	openssh-server-8.0p1-33.0.1.el8_10.x86_64.rpm	9f5378db6016444130e67a35144baae0fa8c7681df3b765c8e101debb4faeb00	-	ol8_x86_64_u10_baseos_patch
	pam_ssh_agent_auth-0.10.3-8.33.0.1.el8_10.x86_64.rpm	a547c2cbd42c1dc9f0c84d281e2bd95552dbc784eca863172e316d4f796fc343	-	ol8_x86_64_baseos_latest
	pam_ssh_agent_auth-0.10.3-8.33.0.1.el8_10.x86_64.rpm	a547c2cbd42c1dc9f0c84d281e2bd95552dbc784eca863172e316d4f796fc343	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team