SUSE-SU-2026:4614-1
SUSE-SU-2026:4614-1 · Security update for openssh8.4
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for openssh8.4 fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
openssh8.4 SUSE:Linux Enterprise Server 12 SP5-LTSS
- Affected ranges
- ECOSYSTEM: < 8.4p1-8.27.1
Update to 8.4p1-8.27.1
openssh8.4 SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
- Affected ranges
- ECOSYSTEM: < 8.4p1-8.27.1
Update to 8.4p1-8.27.1