SUSE-SU-2026:24140-1
Security update for openssh
Published Oct 12, 2026 · updated Oct 15, 2026
This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 12, 2026 · OSV.dev
Detected
This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative secu
Oct 15, 2026 · OSV.dev
Fix available
openssh fixed in 9.6p1-159998.1.1
Oct 15, 2026 · OSV.dev
Fix available
openssh fixed in 9.6p1-159998.1.1
Oct 15, 2026 · OSV.dev
Updated
This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative secu
Affected
- SUSE:Linux Micro 6.0 openssh0 → 9.6p1-159998.1.1