{"id":"CLSA-2026-1784846496","summary":"openssh: Fix of 2 CVEs","details":"- CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in\n  server_request_tun() (upstream 8dfe7ed6)\n- CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by\n  finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS\n  (upstream 5d04ca6a)","modified":"2026-10-26T09:31:58.334934408Z","published":"2026-07-23T22:42:02Z","upstream":["CVE-2026-59999","CVE-2026-60000"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1784846496.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59999"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60000"}],"affected":[{"package":{"name":"openssh","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"openssh-askpass","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh-askpass?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"openssh-cavs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh-cavs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"openssh-clients","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh-clients?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"openssh-keycat","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh-keycat?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"openssh-ldap","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh-ldap?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"openssh-server","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh-server?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"openssh-server-sysvinit","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/openssh-server-sysvinit?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}},{"package":{"name":"pam_ssh_agent_auth","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/pam_ssh_agent_auth?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-2.23.0.3.el7_9.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1784846496.json"}}],"schema_version":"1.9.0"}