ELSA-2026-88211

ELSA-2026-88211 - openssh security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-10-22

Description

[8.0p1-34.0.1]
- Update upstream references [Orabug: 36587718]

[8.0p1-34]
- CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck
Resolves: RHEL-272840
- CVE-2026-59997: Fix internal-sftp server argument parsing limit
Resolves: RHEL-272843
- CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts
Resolves: RHEL-272837
- CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive
authentication where the minimum per-attempt delay was not being enforced
Resolves: RHEL-272826
- CVE-2026-73283: Complete the fix of security bypass due to incorrect
handling of forwarding and tunneling options
Resolves: RHEL-272820

Related CVEs

CVE-2026-59997

CVE-2026-59998

CVE-2026-60000

CVE-2026-60001

CVE-2026-73283

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	openssh-8.0p1-34.0.1.el8_10.src.rpm	63bb1715ed393bb9af9a152c53cbe88dc94cbd8c21d9997991e1b77eb39f22c0	-	ol8_aarch64_appstream
	openssh-8.0p1-34.0.1.el8_10.src.rpm	63bb1715ed393bb9af9a152c53cbe88dc94cbd8c21d9997991e1b77eb39f22c0	-	ol8_aarch64_baseos_latest
	openssh-8.0p1-34.0.1.el8_10.src.rpm	63bb1715ed393bb9af9a152c53cbe88dc94cbd8c21d9997991e1b77eb39f22c0	-	ol8_aarch64_u10_baseos_patch
	openssh-8.0p1-34.0.1.el8_10.aarch64.rpm	9a26635d34efb961455b84602c5ab3cc956f48a5a52e481167072d4c5acf2571	-	ol8_aarch64_baseos_latest
	openssh-8.0p1-34.0.1.el8_10.aarch64.rpm	9a26635d34efb961455b84602c5ab3cc956f48a5a52e481167072d4c5acf2571	-	ol8_aarch64_u10_baseos_patch
	openssh-askpass-8.0p1-34.0.1.el8_10.aarch64.rpm	2073c6853742597c3d49659972f289c45bd3870a6d3ce07508286f3284e55f8b	-	ol8_aarch64_appstream
	openssh-cavs-8.0p1-34.0.1.el8_10.aarch64.rpm	8fcf8c27b5999e9dd6c1f1bdac8ae505ad75a96be8fb6723ddb06b9dfc145330	-	ol8_aarch64_baseos_latest
	openssh-cavs-8.0p1-34.0.1.el8_10.aarch64.rpm	8fcf8c27b5999e9dd6c1f1bdac8ae505ad75a96be8fb6723ddb06b9dfc145330	-	ol8_aarch64_u10_baseos_patch
	openssh-clients-8.0p1-34.0.1.el8_10.aarch64.rpm	3269e7d46223de842a1fa199c79f57c5d82cfc77c8bd3b859c428392c588e9c4	-	ol8_aarch64_baseos_latest
	openssh-clients-8.0p1-34.0.1.el8_10.aarch64.rpm	3269e7d46223de842a1fa199c79f57c5d82cfc77c8bd3b859c428392c588e9c4	-	ol8_aarch64_u10_baseos_patch
	openssh-keycat-8.0p1-34.0.1.el8_10.aarch64.rpm	f8547d6f6448a2583c946c6297b6e67b7e5c67e330c686e3fa9714a17bf30791	-	ol8_aarch64_baseos_latest
	openssh-keycat-8.0p1-34.0.1.el8_10.aarch64.rpm	f8547d6f6448a2583c946c6297b6e67b7e5c67e330c686e3fa9714a17bf30791	-	ol8_aarch64_u10_baseos_patch
	openssh-ldap-8.0p1-34.0.1.el8_10.aarch64.rpm	8e56f7ec5299fd4e1c90b09397a779860e34d2af35da6158dc2e622c0d255db9	-	ol8_aarch64_baseos_latest
	openssh-ldap-8.0p1-34.0.1.el8_10.aarch64.rpm	8e56f7ec5299fd4e1c90b09397a779860e34d2af35da6158dc2e622c0d255db9	-	ol8_aarch64_u10_baseos_patch
	openssh-server-8.0p1-34.0.1.el8_10.aarch64.rpm	ace5111910080adfd77d6711ad3364a3368d7071fa4b5d1d81286515f5ee2fbe	-	ol8_aarch64_baseos_latest
	openssh-server-8.0p1-34.0.1.el8_10.aarch64.rpm	ace5111910080adfd77d6711ad3364a3368d7071fa4b5d1d81286515f5ee2fbe	-	ol8_aarch64_u10_baseos_patch
	pam_ssh_agent_auth-0.10.3-8.34.0.1.el8_10.aarch64.rpm	be1b80c1ac15c0ff2487df4d6bf91bc9a75a9849f86fbdc9b07ddadbc32ec8e2	-	ol8_aarch64_baseos_latest
	pam_ssh_agent_auth-0.10.3-8.34.0.1.el8_10.aarch64.rpm	be1b80c1ac15c0ff2487df4d6bf91bc9a75a9849f86fbdc9b07ddadbc32ec8e2	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	openssh-8.0p1-34.0.1.el8_10.src.rpm	63bb1715ed393bb9af9a152c53cbe88dc94cbd8c21d9997991e1b77eb39f22c0	-	ol8_x86_64_appstream
	openssh-8.0p1-34.0.1.el8_10.src.rpm	63bb1715ed393bb9af9a152c53cbe88dc94cbd8c21d9997991e1b77eb39f22c0	-	ol8_x86_64_baseos_latest
	openssh-8.0p1-34.0.1.el8_10.src.rpm	63bb1715ed393bb9af9a152c53cbe88dc94cbd8c21d9997991e1b77eb39f22c0	-	ol8_x86_64_u10_baseos_patch
	openssh-8.0p1-34.0.1.el8_10.x86_64.rpm	395a9e63f61800c044b29566e85ec314bc8a7fedeb27c2da2f60497bec7b7958	-	ol8_x86_64_baseos_latest
	openssh-8.0p1-34.0.1.el8_10.x86_64.rpm	395a9e63f61800c044b29566e85ec314bc8a7fedeb27c2da2f60497bec7b7958	-	ol8_x86_64_u10_baseos_patch
	openssh-askpass-8.0p1-34.0.1.el8_10.x86_64.rpm	784369ad3ad274a88d0f9ebf046de210a1fc3e81cc62468de96a67971e7b2d98	-	ol8_x86_64_appstream
	openssh-cavs-8.0p1-34.0.1.el8_10.x86_64.rpm	fca8a792309a993b6452b2556c1fae88c4afdaf5e53a46844d83a6edec16dd57	-	ol8_x86_64_baseos_latest
	openssh-cavs-8.0p1-34.0.1.el8_10.x86_64.rpm	fca8a792309a993b6452b2556c1fae88c4afdaf5e53a46844d83a6edec16dd57	-	ol8_x86_64_u10_baseos_patch
	openssh-clients-8.0p1-34.0.1.el8_10.x86_64.rpm	0b3a46ffb6d52c2cc8f9efc093bade9eb6f4c4654b9c6c3a5ea4431a2e1958c1	-	ol8_x86_64_baseos_latest
	openssh-clients-8.0p1-34.0.1.el8_10.x86_64.rpm	0b3a46ffb6d52c2cc8f9efc093bade9eb6f4c4654b9c6c3a5ea4431a2e1958c1	-	ol8_x86_64_u10_baseos_patch
	openssh-keycat-8.0p1-34.0.1.el8_10.x86_64.rpm	fb2c51e652379222a52a5c260da8c2b1ce4ba8de74f4081b83db58e4f9bdfd78	-	ol8_x86_64_baseos_latest
	openssh-keycat-8.0p1-34.0.1.el8_10.x86_64.rpm	fb2c51e652379222a52a5c260da8c2b1ce4ba8de74f4081b83db58e4f9bdfd78	-	ol8_x86_64_u10_baseos_patch
	openssh-ldap-8.0p1-34.0.1.el8_10.x86_64.rpm	1937fce00b7a77e21b01d2290668562196a3c44adbd2ad64930df8201895c9d5	-	ol8_x86_64_baseos_latest
	openssh-ldap-8.0p1-34.0.1.el8_10.x86_64.rpm	1937fce00b7a77e21b01d2290668562196a3c44adbd2ad64930df8201895c9d5	-	ol8_x86_64_u10_baseos_patch
	openssh-server-8.0p1-34.0.1.el8_10.x86_64.rpm	8d7eb9e8601b7b2946c69dd47a18ad7c9be2a738b4d4b2a700a3b6a6e218022a	-	ol8_x86_64_baseos_latest
	openssh-server-8.0p1-34.0.1.el8_10.x86_64.rpm	8d7eb9e8601b7b2946c69dd47a18ad7c9be2a738b4d4b2a700a3b6a6e218022a	-	ol8_x86_64_u10_baseos_patch
	pam_ssh_agent_auth-0.10.3-8.34.0.1.el8_10.x86_64.rpm	26c9102b2915d5f0bf7c01399b276150e3719281cac5218787fbe5fa1ae0d676	-	ol8_x86_64_baseos_latest
	pam_ssh_agent_auth-0.10.3-8.34.0.1.el8_10.x86_64.rpm	26c9102b2915d5f0bf7c01399b276150e3719281cac5218787fbe5fa1ae0d676	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team