PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour openssh au cours des 30 derniers jours : 1. Dans le catalogue KEV : 0.
Vulnérabilités : 4
This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079).
This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-2026-35414: mishandling of authorized_keys principals option (bsc#1261430). - potential security issue when validating mac (bsc#1264568).
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
This update for openssh fixes the following issues: - CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040). - Add a s390 specific ioctl for ECC hardware support (bsc#1225637): - for migration to openssh 8.4: write active/enabled switch over files only if not yet present (bsc#1220110)
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.