Oracle Errata System
Oracle Linux
5.11
2026-06-18T23:35:19
ELSA-2026-50325: openssh security update (IMPORTANT)
Oracle Linux 7
[7.4p1-23.0.5_fips]
- Fix privilege escalation via scp legacy protocol when not in preserving
file mode [CVE-2026-35385][Orabug: 39480251]
[7.4p1-23.0.3_fips]
- Change Epoch from 1 to 10
- Enable fips KDF POST [Orabug: 32461750]
- Disable diffie-hellman-group-exchange-sha256 KEX FIPS method [Orabug: 32461739]
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-35385
cpe:/a:oracle:linux:7::u8_security_validation
openssh-cavs
oraclelinux-release
openssh-server
openssh
pam_ssh_agent_auth
openssh-clients
openssh-askpass
openssh-ldap
openssh-server-sysvinit
openssh-keycat
72f97b74ec551f03
fips
^7
aarch64
10:7.4p1-23.0.5.el7_9_fips
10:0.10.3-2.23.0.5.el7_9_fips