Oracle Errata System
Oracle Linux
5.11
2026-04-03T15:07:13
ELSA-2026-6462: openssh security update (IMPORTANT)
Oracle Linux 9
[8.7p1-48.0.1]
- Upstream references found with /usr/bin/ssh [Orabug: 37814929]
- upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064]
- Update upstream references [Orabug: 36564626]
[8.7p1-48]
- CVE-2026-3497: Fix information disclosure or denial of service due
to uninitialized variables in gssapi-keyex
Resolves: RHEL-155823
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-3497
cpe:/a:oracle:linux:9::appstream
cpe:/o:oracle:linux:9:7:baseos_patch
cpe:/o:oracle:linux:9::baseos_latest
openssh-clients
oraclelinux-release
openssh-server
openssh
pam_ssh_agent_auth
openssh-askpass
openssh-keycat
bc4d06a08d8b756f
^9
aarch64
0:8.7p1-48.0.1.el9_7
0:0.10.4-5.48.0.1.el9_7
x86_64