{"id":"CVE-2026-73281","aliases":["ALPINE-CVE-2026-73281","ALSA-2026:69129","ALSA-2026:69130","AZL-95535","BELL-CVE-2026-73281","DEBIAN-CVE-2026-73281","EUVD-2026-56890","GHSA-j58v-28m8-49f3","JLSEC-2026-1327","MGASA-2026-0521","OESA-2026-3673","OESA-2026-3674","OESA-2026-3747","RHSA-2026:69129","RHSA-2026:69130","RHSA-2026:70719","RLSA-2026:69129","RLSA-2026:69130","SUSE-SU-2026:24140-1","SUSE-SU-2026:24382-1","SUSE-SU-2026:4827-1","UBUNTU-CVE-2026-73281","USN-8721-1"],"status":"published","title":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00158,"percentile":0.05005,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-669"],"published":"2026-08-11T19:10:33Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"openssh","fixed_in":["10.3_p1-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"openssh","fixed_in":["9.8p1-10"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openssh","fixed_in":["9.1_p1-r14"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openssh","fixed_in":["10.5_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openssh","fixed_in":["10.5_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openssh","fixed_in":["9.1_p1-r14"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openssh","fixed_in":["10.5_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openssh","fixed_in":["10.5_p1-r0"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssh","fixed_in":["1:10.5p1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssh-gssapi","fixed_in":["1:10.5p1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenSSH_jll","fixed_in":["10.5.1+0"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"openssh","fixed_in":["9.6p1-21.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"openssh","fixed_in":["9.6p1-21.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openssh","fixed_in":["1:8.9p1-3ubuntu0.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openssh","fixed_in":["1:9.6p1-3ubuntu13.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"openssh","fixed_in":["1:9.6p1-3ubuntu13.19+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openssh","fixed_in":["1:10.2p1-2ubuntu3.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3_p1-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-27.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-27.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-27.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-27.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-27.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-27.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-8.11.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Azure Linux:3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8p1-10"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1_p1-r3"},{"fixed":"9.1_p1-r14"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0_p1-r7"},{"fixed":"10.5_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3_p1-r7"},{"fixed":"10.5_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1_p1-r3"},{"fixed":"9.1_p1-r14"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0_p1-r7"},{"fixed":"10.5_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3_p1-r7"},{"fixed":"10.5_p1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.0p1-1","1:10.0p1-2","1:10.0p1-3","1:10.0p1-4","1:10.0p1-5","1:10.0p1-5~bpo12+2","1:10.0p1-6","1:10.0p1-7","1:10.0p1-7~bpo12+1","1:10.0p1-8","1:10.1p1-1","1:10.1p1-2","1:10.2p1-1","1:10.2p1-2","1:10.2p1-2~bpo13+1","1:10.2p1-3","1:10.2p1-4","1:10.2p1-5","1:10.2p1-6","1:10.2p1-6~bpo13+1","1:10.3p1-1","1:10.3p1-1~bpo13+1","1:10.3p1-2","1:10.3p1-3","1:10.3p1-4","1:10.3p1-5","1:10.3p1-7","1:10.3p1-8","1:10.3p1-9","1:10.4p1-1","1:10.4p1-2","1:10.4p1-3","1:10.4p1-4","1:10.4p1-5","1:10.5p1-1","1:10.6p1-1","1:9.2p1-2","1:9.2p1-2+deb12u1","1:9.2p1-2+deb12u10","1:9.2p1-2+deb12u2","1:9.2p1-2+deb12u3","1:9.2p1-2+deb12u4","1:9.2p1-2+deb12u5","1:9.2p1-2+deb12u6","1:9.2p1-2+deb12u7","1:9.2p1-2+deb12u8","1:9.2p1-2+deb12u9","1:9.3p1-1","1:9.3p1-1+loong64","1:9.3p2-1","1:9.4p1-1","1:9.5p1-1","1:9.5p1-2","1:9.6p1-1","1:9.6p1-2","1:9.6p1-3","1:9.6p1-4","1:9.6p1-5","1:9.7p1-1","1:9.7p1-2","1:9.7p1-3","1:9.7p1-3+hurd.1","1:9.7p1-4","1:9.7p1-5","1:9.7p1-6","1:9.7p1-7","1:9.8p1-1","1:9.8p1-2","1:9.8p1-3","1:9.8p1-4","1:9.8p1-7","1:9.8p1-8","1:9.9p1-1","1:9.9p1-2","1:9.9p1-3","1:9.9p1-3+hurd.1","1:9.9p2-1","1:9.9p2-2"]},{"source":"osv","ecosystem":"Debian:13","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:10.0p1-7","1:10.0p1-7+deb13u1","1:10.0p1-7+deb13u2","1:10.0p1-7+deb13u3","1:10.0p1-7+deb13u4","1:10.0p1-8","1:10.1p1-1","1:10.1p1-2","1:10.2p1-1","1:10.2p1-2","1:10.2p1-2~bpo13+1","1:10.2p1-3","1:10.2p1-4","1:10.2p1-5","1:10.2p1-6","1:10.2p1-6~bpo13+1","1:10.3p1-1","1:10.3p1-1~bpo13+1","1:10.3p1-2","1:10.3p1-3","1:10.3p1-4","1:10.3p1-5","1:10.3p1-7","1:10.3p1-8","1:10.3p1-9","1:10.4p1-1","1:10.4p1-2","1:10.4p1-3","1:10.4p1-4","1:10.4p1-5","1:10.5p1-1","1:10.6p1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5p1-1"}]}],"versions":["1:10.0p1-7","1:10.0p1-8","1:10.1p1-1","1:10.1p1-2","1:10.2p1-1","1:10.2p1-2","1:10.2p1-2~bpo13+1","1:10.2p1-3","1:10.2p1-4","1:10.2p1-5","1:10.2p1-6","1:10.2p1-6~bpo13+1","1:10.3p1-1","1:10.3p1-1~bpo13+1","1:10.3p1-2","1:10.3p1-3","1:10.3p1-4","1:10.3p1-5","1:10.3p1-7","1:10.3p1-8","1:10.3p1-9","1:10.4p1-1","1:10.4p1-2","1:10.4p1-3","1:10.4p1-4","1:10.4p1-5"]},{"source":"osv","ecosystem":"Debian:14","package":"openssh-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5p1-1"}]}],"versions":["1:10.4p1-5"]},{"source":"osv","ecosystem":"Julia","package":"OpenSSH_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"10.5.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0p1-4.1.mga10"}]}],"bundled":21},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-21.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-21.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-26.oe2403sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keysign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-8.11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-8.11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-8.11.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-27.el10_2.rocky.0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el9_8.rocky.0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-159998.1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-slfo.1.1_7.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.52.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.52.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.52.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.52.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.52.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.52.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6.2p2-6","1:6.2p2-6ubuntu1","1:6.4p1-1","1:6.4p1-2","1:6.5p1-1","1:6.5p1-2","1:6.5p1-3","1:6.5p1-4","1:6.5p1-6","1:6.6p1-1","1:6.6p1-2","1:6.6p1-2ubuntu1","1:6.6p1-2ubuntu2","1:6.6p1-2ubuntu2.2","1:6.6p1-2ubuntu2.3","1:6.6p1-2ubuntu2.4","1:6.6p1-2ubuntu2.6","1:6.6p1-2ubuntu2.7","1:6.6p1-2ubuntu2.8","1:6.6p1-2ubuntu2.10","1:6.6p1-2ubuntu2.11","1:6.6p1-2ubuntu2.12","1:6.6p1-2ubuntu2.13","1:6.6p1-2ubuntu2.13+esm1","1:6.6p1-2ubuntu2.13+esm2","1:6.6p1-2ubuntu2.13+esm3","1:6.6p1-2ubuntu2.13+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6.9p1-2","1:6.9p1-3","1:7.1p1-1","1:7.1p1-3","1:7.1p1-4","1:7.1p1-6","1:7.1p2-1","1:7.1p2-2","1:7.2p1-1","1:7.2p2-1","1:7.2p2-2","1:7.2p2-3","1:7.2p2-4","1:7.2p2-4ubuntu1","1:7.2p2-4ubuntu2.1","1:7.2p2-4ubuntu2.2","1:7.2p2-4ubuntu2.4","1:7.2p2-4ubuntu2.5","1:7.2p2-4ubuntu2.6","1:7.2p2-4ubuntu2.7","1:7.2p2-4ubuntu2.8","1:7.2p2-4ubuntu2.10","1:7.2p2-4ubuntu2.10+esm1","1:7.2p2-4ubuntu2.10+esm2","1:7.2p2-4ubuntu2.10+esm3","1:7.2p2-4ubuntu2.10+esm4","1:7.2p2-4ubuntu2.10+esm5","1:7.2p2-4ubuntu2.10+esm6","1:7.2p2-4ubuntu2.10+esm7","1:7.2p2-4ubuntu2.10+esm8","1:7.2p2-4ubuntu2.10+esm9","1:7.2p2-4ubuntu2.10+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.2p2-4ubuntu2.fips.2.2.3","1:7.2p2-4ubuntu2.fips.2.4.1","1:7.2p2-4ubuntu2.fips.2.4.2","1:7.2p2-4ubuntu2.fips.2.8.1","1:7.2p2-4ubuntu2.fips.2.10.1","1:7.2p2-4ubuntu2.fips.2.10.2","1:7.2p2-4ubuntu2.fips.2.10.3","1:7.2p2-4ubuntu2.fips.2.10.4","1:7.2p2-4ubuntu2.fips.2.10.5","1:7.2p2-4ubuntu2.fips.2.10.6","1:7.2p2-4ubuntu2.fips.2.10.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.2p2-4ubuntu2.fips.2.2","1:7.2p2-4ubuntu2.fips.2.2.1","1:7.2p2-4ubuntu2.fips.2.10.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-10","1:7.6p1-4","1:7.6p1-4ubuntu0.1","1:7.6p1-4ubuntu0.2","1:7.6p1-4ubuntu0.3","1:7.6p1-4ubuntu0.5","1:7.6p1-4ubuntu0.6","1:7.6p1-4ubuntu0.7","1:7.6p1-4ubuntu0.7+esm1","1:7.6p1-4ubuntu0.7+esm2","1:7.6p1-4ubuntu0.7+esm3","1:7.6p1-4ubuntu0.7+esm4","1:7.6p1-4ubuntu0.7+esm5","1:7.6p1-4ubuntu0.7+esm6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-8","1:7.5p1-9","1:7.5p1-9build1","1:7.5p1-10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2","1:7.9p1-10~ubuntu18.04.fips.0.3","1:7.9p1-10~ubuntu18.04.fips.0.4","1:7.9p1-10~ubuntu18.04.fips.0.5","1:7.9p1-10~ubuntu18.04.fips.0.6","1:7.9p1-10~ubuntu18.04.fips.0.7","1:7.9p1-10~ubuntu18.04.fips.0.8","1:7.9p1-10~ubuntu18.04.fips.0.9","1:7.9p1-10~ubuntu18.04.fips.0.10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.0p1-6build1","1:8.1p1-1","1:8.1p1-5","1:8.2p1-4","1:8.2p1-4ubuntu0.1","1:8.2p1-4ubuntu0.2","1:8.2p1-4ubuntu0.3","1:8.2p1-4ubuntu0.4","1:8.2p1-4ubuntu0.5","1:8.2p1-4ubuntu0.7","1:8.2p1-4ubuntu0.8","1:8.2p1-4ubuntu0.9","1:8.2p1-4ubuntu0.10","1:8.2p1-4ubuntu0.11","1:8.2p1-4ubuntu0.12","1:8.2p1-4ubuntu0.13","1:8.2p1-4ubuntu0.13+esm1","1:8.2p1-4ubuntu0.13+esm2","1:8.2p1-4ubuntu0.13+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-11build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1","1:8.2p1-4ubuntu0.fips.0.4.0","1:8.2p1-4ubuntu0.fips.0.5.0","1:8.2p1-4ubuntu0.fips.0.7","1:8.2p1-4ubuntu0.fips.0.8","1:8.2p1-4ubuntu0.fips.0.9","1:8.2p1-4ubuntu0.fips.0.10","1:8.2p1-4ubuntu0.fips.0.11","1:8.2p1-4ubuntu0.fips.0.12","1:8.2p1-4ubuntu0.fips.0.13","1:8.2p1-4ubuntu0.fips.0.13.1","1:8.2p1-4ubuntu0.fips.0.13.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.17"}]}],"versions":["1:8.4p1-6ubuntu2","1:8.7p1-2","1:8.7p1-2build1","1:8.7p1-4","1:8.8p1-1","1:8.9p1-3","1:8.9p1-3ubuntu0.1","1:8.9p1-3ubuntu0.3","1:8.9p1-3ubuntu0.4","1:8.9p1-3ubuntu0.5","1:8.9p1-3ubuntu0.6","1:8.9p1-3ubuntu0.7","1:8.9p1-3ubuntu0.10","1:8.9p1-3ubuntu0.11","1:8.9p1-3ubuntu0.13","1:8.9p1-3ubuntu0.14","1:8.9p1-3ubuntu0.15","1:8.9p1-3ubuntu0.16"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-12","1:7.5p1-12build1","1:7.5p1-13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.9p1-3ubuntu0.4+Fips1","1:8.9p1-3ubuntu0.4+Fips3","1:8.9p1-3ubuntu1.fips.0~ppa3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.9p1-3ubuntu0.4+Fips1","1:8.9p1-3ubuntu0.4+Fips3","1:8.9p1-3ubuntu0.6+Fips1","1:8.9p1-3ubuntu0.7+Fips1","1:8.9p1-3ubuntu0.10+Fips1","1:8.9p1-3ubuntu0.11+Fips1","1:8.9p1-3ubuntu0.13+Fips1","1:8.9p1-3ubuntu0.14+Fips1","1:8.9p1-3ubuntu0.15+Fips1","1:8.9p1-3ubuntu0.15+Fips3","1:8.9p1-3ubuntu0.16+Fips3","1:8.9p1-3ubuntu0.18+Fips1","1:8.9p1-3ubuntu1.fips.0~ppa3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu13.19"}]}],"versions":["1:9.3p1-1ubuntu3","1:9.4p1-1ubuntu1","1:9.6p1-3ubuntu1","1:9.6p1-3ubuntu2","1:9.6p1-3ubuntu11","1:9.6p1-3ubuntu12","1:9.6p1-3ubuntu13","1:9.6p1-3ubuntu13.3","1:9.6p1-3ubuntu13.4","1:9.6p1-3ubuntu13.5","1:9.6p1-3ubuntu13.7","1:9.6p1-3ubuntu13.8","1:9.6p1-3ubuntu13.9","1:9.6p1-3ubuntu13.11","1:9.6p1-3ubuntu13.12","1:9.6p1-3ubuntu13.13","1:9.6p1-3ubuntu13.14","1:9.6p1-3ubuntu13.15","1:9.6p1-3ubuntu13.16","1:9.6p1-3ubuntu13.18"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-14","1:7.5p1-15","1:7.5p1-15build1","1:7.5p1-16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu13.19+Fips1"}]}],"versions":["1:9.6p1-3ubuntu13.7+Fips1","1:9.6p1-3ubuntu13.12+Fips1","1:9.6p1-3ubuntu13.13+Fips1","1:9.6p1-3ubuntu13.14+Fips1","1:9.6p1-3ubuntu13.15+Fips1","1:9.6p1-3ubuntu13.16+Fips1","1:9.6p1-3ubuntu13.16+Fips2","1:9.6p1-3ubuntu13.18+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-18","1:7.5p1-18ubuntu1","1:7.5p1-18ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.2p1-2ubuntu3.6"}]}],"versions":["1:10.0p1-5ubuntu5","1:10.2p1-2ubuntu1","1:10.2p1-2ubuntu3","1:10.2p1-2ubuntu3.2","1:10.2p1-2ubuntu3.4","1:10.2p1-2ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17","1:7.5p1-18"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.17"}]}],"versions":["1:8.4p1-6ubuntu2","1:8.7p1-2","1:8.7p1-2build1","1:8.7p1-4","1:8.8p1-1","1:8.9p1-3","1:8.9p1-3ubuntu0.1","1:8.9p1-3ubuntu0.3","1:8.9p1-3ubuntu0.4","1:8.9p1-3ubuntu0.5","1:8.9p1-3ubuntu0.6","1:8.9p1-3ubuntu0.7","1:8.9p1-3ubuntu0.10","1:8.9p1-3ubuntu0.11","1:8.9p1-3ubuntu0.13","1:8.9p1-3ubuntu0.14","1:8.9p1-3ubuntu0.15","1:8.9p1-3ubuntu0.16"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu13.19"}]}],"versions":["1:9.3p1-1ubuntu3","1:9.4p1-1ubuntu1","1:9.6p1-3ubuntu1","1:9.6p1-3ubuntu2","1:9.6p1-3ubuntu11","1:9.6p1-3ubuntu12","1:9.6p1-3ubuntu13","1:9.6p1-3ubuntu13.3","1:9.6p1-3ubuntu13.4","1:9.6p1-3ubuntu13.5","1:9.6p1-3ubuntu13.7","1:9.6p1-3ubuntu13.8","1:9.6p1-3ubuntu13.9","1:9.6p1-3ubuntu13.11","1:9.6p1-3ubuntu13.12","1:9.6p1-3ubuntu13.13","1:9.6p1-3ubuntu13.14","1:9.6p1-3ubuntu13.15","1:9.6p1-3ubuntu13.16","1:9.6p1-3ubuntu13.18"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.2p1-2ubuntu3.6"}]}],"versions":["1:10.0p1-5ubuntu5","1:10.2p1-2ubuntu1","1:10.2p1-2ubuntu3","1:10.2p1-2ubuntu3.2","1:10.2p1-2ubuntu3.4","1:10.2p1-2ubuntu3.5"],"bundled":3}],"products":[{"vendor":"openbsd","product":"openssh"}],"references":[{"url":"https://www.openssh.org/releasenotes.html#10.5","tags":["Product","Release Notes","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73281","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-j58v-28m8-49f3","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-73281","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69129","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59995","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59999","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73281","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73282","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73283","tags":["report"]},{"url":"https://bugzilla.redhat.com/2497927","tags":["report"]},{"url":"https://bugzilla.redhat.com/2497942","tags":["report"]},{"url":"https://bugzilla.redhat.com/2514321","tags":["report"]},{"url":"https://bugzilla.redhat.com/2514327","tags":["report"]},{"url":"https://bugzilla.redhat.com/2514328","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-69129.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69130","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-69130.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-73281","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73281.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-73281","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0521.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35876","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FAMKD5T6664L7TA7EBJFLZB2RX3AQYZ/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8533-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2ZK2T3OFPOIBFAZQAJISQ7EML4PHYVB/","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/08/12/1","tags":["web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRB2YTKIEJGFGAKEXYAPCDQSKUFBEI7B/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8721-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8928-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3673","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3674","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3747","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73283","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514328","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69129.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59995","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59995","tags":["advisory"]},{"url":"https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2","tags":["article"]},{"url":"https://www.openssh.org/releasenotes.html#10.4p1","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/06/5","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59999","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73281","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73282","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73283","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69130.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70719","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70719.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:69129","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:69130","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259462","tags":["report"]},{"url":"https://bugzilla.suse.com/1275074","tags":["report"]},{"url":"https://bugzilla.suse.com/1275075","tags":["report"]},{"url":"https://bugzilla.suse.com/1275079","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-73281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-73282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-73283","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624382-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271044","tags":["report"]},{"url":"https://bugzilla.suse.com/1271046","tags":["report"]},{"url":"https://bugzilla.suse.com/1271048","tags":["report"]},{"url":"https://bugzilla.suse.com/1271049","tags":["report"]},{"url":"https://bugzilla.suse.com/1271052","tags":["report"]},{"url":"https://bugzilla.suse.com/1271053","tags":["report"]},{"url":"https://bugzilla.suse.com/1271054","tags":["report"]},{"url":"https://bugzilla.suse.com/1271055","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60002","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264827-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-73281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-73282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-73283","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-73281","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T19:10:33.079Z","modified":"2026-08-11T20:16:37.888Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T13:43:33.766176Z"}],"euvd":[{"id":"EUVD-2026-56890","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T19:10:33Z","modified":"2026-08-11T20:16:37Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T18:01:59.481615Z"}],"ghsa":[{"id":"GHSA-j58v-28m8-49f3","title":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T21:33:11Z","modified":"2026-08-11T21:33:11Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T15:10:21.509652Z"}],"nvd":[{"id":"CVE-2026-73281","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T20:18:49.69Z","modified":"2026-10-24T15:10:00.19Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T14:12:36.880938Z"}],"osv":[{"id":"ALPINE-CVE-2026-73281","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T20:18:49.69Z","modified":"2026-10-01T02:17:49.403405452Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-73281","status":"published","published":"2026-08-14T06:04:03.482275Z","modified":"2026-08-20T07:15:07.220487536Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:25.777499Z"},{"id":"CVE-2026-73281","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T19:10:33.079Z","modified":"2026-10-28T02:30:34.008390505Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T15:45:16.365946Z"},{"id":"DEBIAN-CVE-2026-73281","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T20:18:49.69Z","modified":"2026-10-25T09:47:37.928995872Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:46:02.499355Z"},{"id":"JLSEC-2026-1327","title":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-14T07:55:16.253Z","modified":"2026-08-14T08:13:45.794926668Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2026-3673","title":"openssh security update","description":"An open source implementation of SSH protocol version 2\r\n\r\nSecurity Fix(es):\n\nIn ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the (CVE-2026-73281)","status":"published","published":"2026-09-05T15:03:48Z","modified":"2026-09-05T15:16:36.826919394Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3674","title":"openssh security update","description":"An open source implementation of SSH protocol version 2\r\n\r\nSecurity Fix(es):\n\nIn ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the (CVE-2026-73281)","status":"published","published":"2026-09-05T15:03:48Z","modified":"2026-09-05T15:16:35.846237696Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3747","title":"openssh security update","description":"An open source implementation of SSH protocol version 2\r\n\r\nSecurity Fix(es):\n\nIn ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the (CVE-2026-73281)\n\nIn ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.(CVE-2026-73282)\n\nIn sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.(CVE-2026-73283)","status":"published","published":"2026-09-14T16:33:57Z","modified":"2026-09-13T16:45:30.594147639Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2026:69129","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-09-21T10:14:56Z","modified":"2026-10-15T10:24:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69130","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-09-22T10:19:49Z","modified":"2026-10-15T10:24:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70719","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-24T10:15:05Z","modified":"2026-10-07T10:18:34Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:69129","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)\n\n* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)\n\n* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)\n\n* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)\n\n* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-22T12:08:07.529031Z","modified":"2026-09-22T12:30:02.649438461Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:69130","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)\n\n* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)\n\n* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)\n\n* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)\n\n* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-22T18:04:11.996091Z","modified":"2026-09-22T18:24:41.379930332Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-73281","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T20:18:00Z","modified":"2026-10-23T04:45:03.432439955Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:57:08.628462Z"},{"id":"ALSA-2026:69129","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  \n\nSecurity Fix(es):  \n\n  * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)\n  * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)\n  * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)\n  * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)\n  * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-21T00:00:00Z","modified":"2026-10-29T11:30:42.352825024Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:69130","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  \n\nSecurity Fix(es):  \n\n  * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)\n  * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)\n  * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)\n  * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)\n  * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-21T00:00:00Z","modified":"2026-10-29T11:32:32.074208251Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-95535","title":"CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10","description":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","status":"published","published":"2026-08-11T20:18:49Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.077208Z"},{"id":"MGASA-2026-0521","title":"Updated openssh packages fix security vulnerabilities","description":"Local mitm of x11 forwarding via abstract unix socket pre-binding in Red\nHat Enterprise Linux openssh client versions. (CVE-2026-55655)\nsftp in OpenSSH before 10.4 does not properly constrain the location of\ndownloaded files when \"sftp server:/path .\" is used with an\nattacker-controlled server. (CVE-2026-59995)\nscp in OpenSSH before 10.4 may place a file in the parent directory of\nan intended directory when the copy occurs between two remote\ndestinations. (CVE-2026-59996)\ninternal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9\ncommand-line arguments, which can be important if a later command-line\nargument would have helped to ensure the intended security properties of\nan SFTP connection. (CVE-2026-59997)\nsshd in OpenSSH before 10.4 has an undocumented security-relevant\nbehavior: GSSAPIStrictAcceptorCheck has no value if the server is in\nWindows Active Directory. (CVE-2026-59998)\nIn sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to\ntake precedence over PermitTunnel=yes, but did not. (CVE-2026-59999)\nsshd in OpenSSH before 10.4 allows remote attackers to cause a denial of\nservice (resource consumption from excessive authentication attempts)\nbecause MaxAuthTries was mishandled for GSSAPIAuthentication.\n(CVE-2026-60000)\nsshd in OpenSSH before 10.4 does not always honor the minimum\nauthentication delay. (CVE-2026-60001)\nssh in OpenSSH before 10.4 can have a use-after-free when a server\nchanges its host key during a key re-exchange. (This outcome occurs only\non the client side.). (CVE-2026-60002)\nIn ssh-agent in OpenSSH before 10.5, some operations can occur remotely\nbut were intended to occur only locally, including operations that add\ntokens or use keys. This is caused by misinteraction between agent\nlocking and the session-bind@openssh.com extension. (CVE-2026-73281)\nIn ssh in OpenSSH before 10.5, a use-after-free for realloc data can\noccur if a certain pair of remote-forwarding operations are concurrent.\n(CVE-2026-73282)\nIn sshd in OpenSSH before 10.5, the restrict keyword (in\nauthorized_keys) was supposed to be applicable to tunnel forwarding but\nwas not. (CVE-2026-73283)\nIn sftp in OpenSSH before 10.6, a server can trigger directory traversal\n(causing files to be written to unintended locations) during a recursive\ncopy operation. (CVE-2026-106552)\nIn sshd in OpenSSH before 10.6, credentials can incorrectly persist\nafter failure of a GSSAPIAuthentication authentication attempt.\n(CVE-2026-106553)\nIn sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication\nstate can incorrectly be persisted across authentication attempts.\n(CVE-2026-106555)\nIn sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be\nused even though this is contraindicated by the arXiv 2609.07709\n\"Crossing the Streams\" findings. (CVE-2026-106582)\nIn ssh in OpenSSH before 10.6, a $ or \\ character can occur in a\ncommand-line username, leading to injection. (CVE-2026-106583)\nIn ssh-keygen in OpenSSH before 10.6, certificates could have incorrect\nexpiration times because of Daylight Saving mishandling. There can be a\nslightly more severe effect on users in certain Antarctic locations.\n(CVE-2026-106584)\nIn sshd and ssh in OpenSSH before 10.6, there is no check for whether\nthe maximum packet length is exceeded during decompression of highly\ncompressed data. (CVE-2026-106585)\nIn sshd in OpenSSH before 10.6, the restrict keyword (in\nauthorized_keys) was supposed to be applicable to tunnel forwarding but\nwas not, a different vulnerability than CVE-2026-73283.\n(CVE-2026-106586)\nIn sshd in OpenSSH before 10.6, the value \"none\" for a configuration\noption is sometimes interpreted as a filename but was intended to mean\nthat a feature is disabled. (CVE-2026-106587)\n","status":"published","published":"2026-10-19T16:59:00Z","modified":"2026-10-19T17:13:38.453313742Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"SUSE-SU-2026:24140-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses\n  (bsc#1275075).\n- CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free\n  (bsc#1275074).\n- CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses\n  (bsc#1275079).\n","status":"published","published":"2026-10-12T08:06:32Z","modified":"2026-10-15T17:23:12.030495583Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24382-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044).\n- CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended target directory\n  (bsc#1271046).\n- CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048).\n- CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory\n  (bsc#1271049).\n- CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052).\n- CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053).\n- CVE-2026-60001: sshd: honor the minimum authentication delay (bsc#1271054).\n- CVE-2026-60002: ssh: client-side use-after-free when a server changes its host key during a key reexchange\n  (bsc#1271055).\n- CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses\n  (bsc#1275075).\n- CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free\n  (bsc#1275074).\n- CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses\n  (bsc#1275079).\n","status":"published","published":"2026-10-23T11:58:00Z","modified":"2026-10-27T17:23:19.462025353Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4827-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses\n  (bsc#1275075).\n- CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free\n  (bsc#1275074).\n- CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses\n  (bsc#1275079).\n\nChanges for openssh:\n- Included mentions of the configuration drop-in directories (bsc#1259462).\n","status":"published","published":"2026-10-21T11:57:42Z","modified":"2026-10-21T20:02:14.687468469Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8721-1","title":"openssh vulnerabilities","description":"It was discovered that OpenSSH's ssh-agent incorrectly handled interactions\nbetween agent locking and the session-bind@openssh.com extension. A remote\nattacker with access to a forwarded agent connection could possibly use\nthis issue to perform operations that should only be available locally,\nsuch as adding tokens or using keys. (CVE-2026-73281)\n\nIt was discovered that OpenSSH's ssh client incorrectly handled concurrent\nremote-forwarding operations. A remote attacker could possibly use this\nissue to cause a use-after-free condition, resulting in a denial of service\nor the execution of arbitrary code. (CVE-2026-73282)\n\nIt was discovered that OpenSSH's sshd server incorrectly applied the\nrestrict keyword from authorized_keys to tunnel forwarding requests. A\nlocal attacker with an authorized key could possibly use this issue to\nbypass intended tunnel forwarding restrictions. (CVE-2026-73283)","status":"published","published":"2026-09-03T12:30:15Z","modified":"2026-09-03T22:56:55.264832476Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}