[CLSA-2026:1785153163] openssh: Fix of CVE-2026-55655
Type:
security
Severity:
Moderate
Release date:
2026-07-27 11:52:54 UTC
Description:
- CVE-2026-55655: gate the client-side abstract X11 socket behind SSH_INSECURE_ABSTRACT_SOCKET_ENABLED to prevent MITM of forwarded X11 via abstract UNIX socket pre-binding; backport downstream f5884eb
CVEs fixed:
Updated packages:
  • openssh-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm
    sha:6da6c03353bd4bba5e8affaaf39c275db686ee9a9858ebbecfec5a253a036370
  • openssh-askpass-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm
    sha:e5d5f08faec46930b2f8e0838f5c32e09d8e240774c5e33853a44566e7622563
  • openssh-clients-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm
    sha:1b8309c3ba09d1ad2e5855cb64fa3f5316440e820530591b5870246b3e3302ce
  • openssh-keycat-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm
    sha:55cdfe28e2f3fafda8cc5a7f6d4b96b4f484fa073ec10405a8c402957312cbff
  • openssh-server-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm
    sha:f14ed71abf78e96e2e71600dfe08b7763789240db7a8c2a856e885822671e3c2
  • openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm
    sha:17a716d9075e4167d09b7a3716ebfb91eb3f97e9a8912bc0159c8d8ee80dea7f
  • pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els22.x86_64.rpm
    sha:0252c988aeb91d7198be71de07e41e2ab354e3a7998fc3a8ffa70ba26f3cc91a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.