Release date:
2026-09-14 10:14:09 UTC
Description:
* SECURITY UPDATE: remote forwarding realloc use-after-free
- debian/patches/CVE-2026-73282.patch: resolve remote forwarding
confirmations by index instead of storing pointers that can be
invalidated by later multiplexed forwarding requests, and count only
the startup requests when deferring the post-authentication fork
- CVE-2026-73282
Updated packages:
-
openssh-client_7.2p2-4ubuntu2.10+tuxcare.els11_amd64.deb
sha:2a4570ad824d9cf575df9e6468977b5bc3db17b5
-
openssh-client-ssh1_7.2p2-4ubuntu2.10+tuxcare.els11_amd64.deb
sha:6ddfb07ecfb76a90fb703c6545104421742dbab3
-
openssh-server_7.2p2-4ubuntu2.10+tuxcare.els11_amd64.deb
sha:90ae6e6ca00048fd1a66ada140983a0c3d41f8e9
-
openssh-sftp-server_7.2p2-4ubuntu2.10+tuxcare.els11_amd64.deb
sha:7cd182122a3cb97fba2c8893e9fa00bcbe6ff563
-
ssh_7.2p2-4ubuntu2.10+tuxcare.els11_all.deb
sha:02c8a1fabc6510a3725ec734ac8eec87a05af772
-
ssh-askpass-gnome_7.2p2-4ubuntu2.10+tuxcare.els11_amd64.deb
sha:0c8cf4388bef17855626b3bf246a6c825583fdd3
-
ssh-krb5_7.2p2-4ubuntu2.10+tuxcare.els11_all.deb
sha:02ab719b95d2bba8d913a650aa7272070bc38862
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
