Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4827-1

Опубликовано: 21 окт. 2026
Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075).
  • CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074).
  • CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079).

Changes for openssh:

  • Included mentions of the configuration drop-in directories (bsc#1259462).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
openssh-9.6p1-150600.6.52.2
openssh-clients-9.6p1-150600.6.52.2
openssh-common-9.6p1-150600.6.52.2
openssh-fips-9.6p1-150600.6.52.2
openssh-helpers-9.6p1-150600.6.52.2
openssh-server-9.6p1-150600.6.52.2
openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
openssh-askpass-gnome-9.6p1-150600.6.52.1
SUSE Linux Enterprise Server 15 SP6-LTSS
openssh-9.6p1-150600.6.52.2
openssh-askpass-gnome-9.6p1-150600.6.52.1
openssh-clients-9.6p1-150600.6.52.2
openssh-common-9.6p1-150600.6.52.2
openssh-fips-9.6p1-150600.6.52.2
openssh-helpers-9.6p1-150600.6.52.2
openssh-server-9.6p1-150600.6.52.2
openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2
SUSE Linux Enterprise Server for SAP Applications 15 SP6
openssh-9.6p1-150600.6.52.2
openssh-askpass-gnome-9.6p1-150600.6.52.1
openssh-clients-9.6p1-150600.6.52.2
openssh-common-9.6p1-150600.6.52.2
openssh-fips-9.6p1-150600.6.52.2
openssh-helpers-9.6p1-150600.6.52.2
openssh-server-9.6p1-150600.6.52.2
openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2

Ссылки

Описание

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-clients-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-common-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-fips-9.6p1-150600.6.52.2
Ссылки

Описание

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-clients-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-common-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-fips-9.6p1-150600.6.52.2
Ссылки

Описание

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-clients-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-common-9.6p1-150600.6.52.2
SUSE Linux Enterprise Module for Basesystem 15 SP7:openssh-fips-9.6p1-150600.6.52.2
Ссылки
Уязвимость SUSE-SU-2026:4827-1