Most recent entries from all

ALSA-2026:69129 — Important: openssh security update

Affected: AlmaLinux:10: openssh, AlmaLinux:10: openssh-askpass, AlmaLinux:10: openssh-clients, AlmaLinux:10: openssh-keycat, AlmaLinux:10: openssh-keysign, AlmaLinux:10: openssh-server

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-73282

Affected: Alpaquita:25: openssh, Alpaquita:stream: openssh, BellSoft Hardened Containers:25: openssh, BellSoft Hardened Containers:stream: openssh

EUVD-2026-351278

fkie_cve-2026-73282

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

GHSA-jwc3-6qvm-4r66

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

msrc_CVE-2026-73282 — In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding opera…

msrc_CVE-2026-73282

OESA-2026-3746 — openssh security update

Affected: openEuler:24.03-LTS-SP1: openssh

An open source implementation of SSH protocol version 2 Security Fix(es):

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.(CVE-2026-73282)

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.(CVE-2026-73283)

RHSA-2026:69129 — Red Hat Security Advisory: openssh security update

openssh: OpenSSH: sftp client allows attacker to control downloaded file location openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass

RHSA-2026:70719 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass

RLSA-2026:69129 — Important: openssh security update

Affected: Rocky Linux:10: openssh

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)

* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)

* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)

* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)

* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-73282

Affected: Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:20.04:LTS: openssh and 10 more

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

WID-SEC-W-2026-2747 — OpenSSH: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service und potentiell Codeausführung zu erreichen.