SUSE-SU-2026:4827-1
SUSE-SU-2026:4827-1 · Security update for openssh
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). Changes for openssh: - Included mentions of the configuration drop-in directories (bsc#1259462).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system · network
Produits et versions concernés
openssh SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Plages de versions concernées
- ECOSYSTEM: < 9.6p1-150600.6.52.2
Mettez à jour vers 9.6p1-150600.6.52.2
openssh-askpass-gnome SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
- Plages de versions concernées
- ECOSYSTEM: < 9.6p1-150600.6.52.1
Mettez à jour vers 9.6p1-150600.6.52.1
openssh SUSE:Linux Enterprise Server 15 SP6-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 9.6p1-150600.6.52.2
Mettez à jour vers 9.6p1-150600.6.52.2
openssh-askpass-gnome SUSE:Linux Enterprise Server 15 SP6-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 9.6p1-150600.6.52.1
Mettez à jour vers 9.6p1-150600.6.52.1
openssh SUSE:Linux Enterprise Server for SAP Applications 15 SP6
- Plages de versions concernées
- ECOSYSTEM: < 9.6p1-150600.6.52.2
Mettez à jour vers 9.6p1-150600.6.52.2
openssh-askpass-gnome SUSE:Linux Enterprise Server for SAP Applications 15 SP6
- Plages de versions concernées
- ECOSYSTEM: < 9.6p1-150600.6.52.1
Mettez à jour vers 9.6p1-150600.6.52.1
Sources originales
- https://www.suse.com/support/update/announcement/2026/suse-su-20264827-1/
- https://bugzilla.suse.com/1259462
- https://bugzilla.suse.com/1275074
- https://bugzilla.suse.com/1275075
- https://bugzilla.suse.com/1275079
- https://www.suse.com/security/cve/CVE-2026-73281
- https://www.suse.com/security/cve/CVE-2026-73282
- https://www.suse.com/security/cve/CVE-2026-73283
- https://osv.dev/vulnerability/SUSE-SU-2026:4827-1