Summary
[8.7p1-48.0.1]
- Upstream references found with /usr/bin/ssh [Orabug: 37814929]
- upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064]
- Update upstream references [Orabug: 36564626]
[8.7p1-48]
- CVE-2026-3497: Fix information disclosure or denial of service due
to uninitialized variables in gssapi-keyex
Resolves: RHEL-155823
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | openssh | 0:8.7p1-48.0.1.el9_7 |
| Oracle Linux · 9 | openssh-askpass | 0:8.7p1-48.0.1.el9_7 |
| Oracle Linux · 9 | openssh-clients | 0:8.7p1-48.0.1.el9_7 |
| Oracle Linux · 9 | openssh-keycat | 0:8.7p1-48.0.1.el9_7 |
| Oracle Linux · 9 | openssh-server | 0:8.7p1-48.0.1.el9_7 |
| Oracle Linux · 9 | pam_ssh_agent_auth | 0:0.10.4-5.48.0.1.el9_7 |
Vulnerabilities 1
-
Low 2.7
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAP…