Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4811-1

Опубликовано: 21 окт. 2026
Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074).
  • CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079).

Список пакетов

Container suse/sle-micro-rancher/5.3:latest
openssh-8.4p1-150300.3.68.2
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
Container suse/sle-micro-rancher/5.4:latest
openssh-8.4p1-150300.3.68.2
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
Container suse/sle-micro/5.5:latest
openssh-8.4p1-150300.3.68.2
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise Micro 5.3
openssh-8.4p1-150300.3.68.2
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise Micro 5.4
openssh-8.4p1-150300.3.68.2
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise Micro 5.5
openssh-8.4p1-150300.3.68.2
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise Server 15 SP4-LTSS
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise Server 15 SP5-LTSS
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise Server for SAP Applications 15 SP4
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2
SUSE Linux Enterprise Server for SAP Applications 15 SP5
openssh-8.4p1-150300.3.68.2
openssh-askpass-gnome-8.4p1-150300.3.68.1
openssh-clients-8.4p1-150300.3.68.2
openssh-common-8.4p1-150300.3.68.2
openssh-fips-8.4p1-150300.3.68.2
openssh-helpers-8.4p1-150300.3.68.2
openssh-server-8.4p1-150300.3.68.2

Ссылки

Описание

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Затронутые продукты
Container suse/sle-micro-rancher/5.3:latest:openssh-8.4p1-150300.3.68.2
Container suse/sle-micro-rancher/5.3:latest:openssh-clients-8.4p1-150300.3.68.2
Container suse/sle-micro-rancher/5.3:latest:openssh-common-8.4p1-150300.3.68.2
Container suse/sle-micro-rancher/5.3:latest:openssh-server-8.4p1-150300.3.68.2
Ссылки

Описание

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Затронутые продукты
Container suse/sle-micro-rancher/5.3:latest:openssh-8.4p1-150300.3.68.2
Container suse/sle-micro-rancher/5.3:latest:openssh-clients-8.4p1-150300.3.68.2
Container suse/sle-micro-rancher/5.3:latest:openssh-common-8.4p1-150300.3.68.2
Container suse/sle-micro-rancher/5.3:latest:openssh-server-8.4p1-150300.3.68.2
Ссылки
Уязвимость SUSE-SU-2026:4811-1