p PatchFirst

SUSE-SU-2026:4686-1

SUSE-SU-2026:4686-1 · Security update for openssh

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079).

Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • openssh SUSE:Linux Enterprise Server 12 SP5-LTSS

    Affected ranges
    • ECOSYSTEM: < 7.2p2-81.43.1

    Update to 7.2p2-81.43.1

  • openssh-askpass-gnome SUSE:Linux Enterprise Server 12 SP5-LTSS

    Affected ranges
    • ECOSYSTEM: < 7.2p2-81.43.1

    Update to 7.2p2-81.43.1

  • openssh SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5

    Affected ranges
    • ECOSYSTEM: < 7.2p2-81.43.1

    Update to 7.2p2-81.43.1

  • openssh-askpass-gnome SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5

    Affected ranges
    • ECOSYSTEM: < 7.2p2-81.43.1

    Update to 7.2p2-81.43.1

Original sources

Check your server →