{"id":"CLSA-2026-1786010935","aliases":[],"status":"published","title":"Update of openssh","description":"- Re-tag base release to 23.0.5 to align NVR with Oracle Linux errata;\n  no code or security content changes — this build already contains all\n  fixes shipped in Oracle's 7.4p1-23.0.5.el7_9","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-08-07T17:35:29Z","modified":"2026-10-26T09:31:55Z","fixes":[{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-askpass","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-cavs","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-clients","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-keycat","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-ldap","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server-sysvinit","fixed_in":["7.4p1-23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-2.23.0.5.el7_9.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.5.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-2.23.0.5.el7_9.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1786010935.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2026-1786010935","title":"Update of openssh","description":"- Re-tag base release to 23.0.5 to align NVR with Oracle Linux errata;\n  no code or security content changes — this build already contains all\n  fixes shipped in Oracle's 7.4p1-23.0.5.el7_9","status":"published","published":"2026-08-07T17:35:29Z","modified":"2026-10-26T09:31:55.762849583Z","updated_at":"2026-11-02T15:43:46.850893Z"}]}}