ELSA-2026-73955

ELSA-2026-73955 - openssh security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-10-01

Description

[9.9p1-12.0.1]
- Restore pam_ssh_agent_rel values that were used for initial release
- Fix PerSourcePenalties grace-exceeded using the crash penalty value [Orabug: 39825354]
- Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]
- Upstream references found with /usr/bin/ssh [Orabug: 37814929]

[9.9p1-12]
- CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
authentication where the minimum per-attempt delay was not being enforced
Resolves: RHEL-258461

Related CVEs

CVE-2026-60001

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssh-9.9p1-12.0.1.el9_8.src.rpm	e04403e49ab0a9e0cdc9d46cbb1356d2f7f646939acd06aa1415f49c23664d4e	-	ol9_aarch64_appstream
	openssh-9.9p1-12.0.1.el9_8.src.rpm	e04403e49ab0a9e0cdc9d46cbb1356d2f7f646939acd06aa1415f49c23664d4e	-	ol9_aarch64_baseos_latest
	openssh-9.9p1-12.0.1.el9_8.src.rpm	e04403e49ab0a9e0cdc9d46cbb1356d2f7f646939acd06aa1415f49c23664d4e	-	ol9_aarch64_u8_baseos_patch
	openssh-9.9p1-12.0.1.el9_8.aarch64.rpm	f3e2a2c6ed32ed5cc55aacbd9da2471e9c15ea98ee6f2b5299727af7d744c38f	-	ol9_aarch64_baseos_latest
	openssh-9.9p1-12.0.1.el9_8.aarch64.rpm	f3e2a2c6ed32ed5cc55aacbd9da2471e9c15ea98ee6f2b5299727af7d744c38f	-	ol9_aarch64_u8_baseos_patch
	openssh-askpass-9.9p1-12.0.1.el9_8.aarch64.rpm	90ffb2fdf03940df3abc8ea613d7c054233261735bba037fc94e6375cbc43ea6	-	ol9_aarch64_appstream
	openssh-clients-9.9p1-12.0.1.el9_8.aarch64.rpm	6880f55fd67b7fb41747d2b008f6c2387e7fd5dc868b9edeac682c322580bbba	-	ol9_aarch64_baseos_latest
	openssh-clients-9.9p1-12.0.1.el9_8.aarch64.rpm	6880f55fd67b7fb41747d2b008f6c2387e7fd5dc868b9edeac682c322580bbba	-	ol9_aarch64_u8_baseos_patch
	openssh-keycat-9.9p1-12.0.1.el9_8.aarch64.rpm	5151157bb71709c3baf12e6fab7546f4f36f19715dba8e62b9259d3b494cffc7	-	ol9_aarch64_baseos_latest
	openssh-keycat-9.9p1-12.0.1.el9_8.aarch64.rpm	5151157bb71709c3baf12e6fab7546f4f36f19715dba8e62b9259d3b494cffc7	-	ol9_aarch64_u8_baseos_patch
	openssh-server-9.9p1-12.0.1.el9_8.aarch64.rpm	f678a818003d55d5a36d83a3a4bcdb7343148eb696cabf085dbb4b93c1246e7d	-	ol9_aarch64_baseos_latest
	openssh-server-9.9p1-12.0.1.el9_8.aarch64.rpm	f678a818003d55d5a36d83a3a4bcdb7343148eb696cabf085dbb4b93c1246e7d	-	ol9_aarch64_u8_baseos_patch
	pam_ssh_agent_auth-0.10.4-9.12.0.1.el9_8.aarch64.rpm	e83f45c41f59a36364823b8cde8d4e617f42ce3caf1f94efd2a6d537431a6af4	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	openssh-9.9p1-12.0.1.el9_8.src.rpm	e04403e49ab0a9e0cdc9d46cbb1356d2f7f646939acd06aa1415f49c23664d4e	-	ol9_x86_64_appstream
	openssh-9.9p1-12.0.1.el9_8.src.rpm	e04403e49ab0a9e0cdc9d46cbb1356d2f7f646939acd06aa1415f49c23664d4e	-	ol9_x86_64_baseos_latest
	openssh-9.9p1-12.0.1.el9_8.src.rpm	e04403e49ab0a9e0cdc9d46cbb1356d2f7f646939acd06aa1415f49c23664d4e	-	ol9_x86_64_u8_baseos_patch
	openssh-9.9p1-12.0.1.el9_8.x86_64.rpm	cfb1905230bdad7410de8a47efb7085eec318e360a3741c3958f06d9577dad44	-	ol9_x86_64_baseos_latest
	openssh-9.9p1-12.0.1.el9_8.x86_64.rpm	cfb1905230bdad7410de8a47efb7085eec318e360a3741c3958f06d9577dad44	-	ol9_x86_64_u8_baseos_patch
	openssh-askpass-9.9p1-12.0.1.el9_8.x86_64.rpm	09cd2424a6f43687c72791eb2830332ad511c42803701431a7927f4d68f37d6c	-	ol9_x86_64_appstream
	openssh-clients-9.9p1-12.0.1.el9_8.x86_64.rpm	ae16ce4ced88754cfa1f606fba6926621b2b88ea39b63113f8da88b31a528c87	-	ol9_x86_64_baseos_latest
	openssh-clients-9.9p1-12.0.1.el9_8.x86_64.rpm	ae16ce4ced88754cfa1f606fba6926621b2b88ea39b63113f8da88b31a528c87	-	ol9_x86_64_u8_baseos_patch
	openssh-keycat-9.9p1-12.0.1.el9_8.x86_64.rpm	44b7118cc354e30e78afc628565a3e5d2685c5e067c76ea9ebae820b7bbb6862	-	ol9_x86_64_baseos_latest
	openssh-keycat-9.9p1-12.0.1.el9_8.x86_64.rpm	44b7118cc354e30e78afc628565a3e5d2685c5e067c76ea9ebae820b7bbb6862	-	ol9_x86_64_u8_baseos_patch
	openssh-server-9.9p1-12.0.1.el9_8.x86_64.rpm	38c9a9aaccb6f46c4d0af4ba2187911d67dd4555db724dc4e2ebe922b1f201a2	-	ol9_x86_64_baseos_latest
	openssh-server-9.9p1-12.0.1.el9_8.x86_64.rpm	38c9a9aaccb6f46c4d0af4ba2187911d67dd4555db724dc4e2ebe922b1f201a2	-	ol9_x86_64_u8_baseos_patch
	pam_ssh_agent_auth-0.10.4-9.12.0.1.el9_8.x86_64.rpm	bc60748bb98040ee581560841f94620b0727e3e21f8222ff31dcd9fba4d05fb0	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team