[CLSA-2026:1785143860] openssh: Fix of CVE-2026-55655
Type:
security
Severity:
Moderate
Release date:
2026-07-27 09:17:51 UTC
Description:
- CVE-2026-55655: gate the client-side abstract X11 socket behind SSH_INSECURE_ABSTRACT_SOCKET_ENABLED to prevent MITM of forwarded X11 via abstract UNIX socket pre-binding; backport downstream f5884eb
CVEs fixed:
Updated packages:
  • openssh-8.7p1-45.el9_6.tuxcare.els15.x86_64.rpm
    sha:831653e944f0a6d3304cc6352da60781b053f3edb383c053eb66f4f95c04c17c
  • openssh-askpass-8.7p1-45.el9_6.tuxcare.els15.x86_64.rpm
    sha:8aa388dfdc92e3497b9e25867afc278111cb00156f356c8d663fcdb520639fe5
  • openssh-clients-8.7p1-45.el9_6.tuxcare.els15.x86_64.rpm
    sha:9c17db2a4e83edb9549b1e7d6b5c44063238b270def93a3991bff89146c406e1
  • openssh-keycat-8.7p1-45.el9_6.tuxcare.els15.x86_64.rpm
    sha:c0a47be059fdc03e9dc93b5eda871e95ba38986eed92eeb5ca91b816621a0007
  • openssh-server-8.7p1-45.el9_6.tuxcare.els15.x86_64.rpm
    sha:d4f31f54ca59f030daac270d4670fc76b1c5cb5b10ac338a35eadae4789073f3
  • openssh-sk-dummy-8.7p1-45.el9_6.tuxcare.els15.x86_64.rpm
    sha:d5d1803c505574a380f015e1bc33395babf71ced01f63b7dc75d9dd8ac00d8d3
  • pam_ssh_agent_auth-0.10.4-5.45.el9_6.tuxcare.els15.x86_64.rpm
    sha:33f08034ccd3de51b17ede3eb64eb52d2e93e7a5d100461411d748a0b12791bc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.