[CLSA-2026:1789376654] Fix CVE(s): CVE-2026-73282
Type:
security
Severity:
Important
Release date:
2026-09-14 09:04:24 UTC
Description:
* SECURITY UPDATE: remote forwarding use-after-free - debian/patches/CVE-2026-73282.patch: store remote forwarding confirmation state by index so reallocations of the remote forwarding list cannot invalidate callback state - CVE-2026-73282
CVEs fixed:
Updated packages:
  • openssh-client_7.6p1-4ubuntu0.7+tuxcare.els12_amd64.deb
    sha:e991694ea65683e6f15de2b6e538a61b85ee5c13
  • openssh-server_7.6p1-4ubuntu0.7+tuxcare.els12_amd64.deb
    sha:bfa6b2cf2062ca42bb445d4034d6240cf0c0a67e
  • openssh-sftp-server_7.6p1-4ubuntu0.7+tuxcare.els12_amd64.deb
    sha:24ca883330ee1bc09eb3c5cfe3f934beb86905a3
  • ssh_7.6p1-4ubuntu0.7+tuxcare.els12_all.deb
    sha:479c19cb6287167fde896c3c86d7152788aa7c61
  • ssh-askpass-gnome_7.6p1-4ubuntu0.7+tuxcare.els12_amd64.deb
    sha:7ba1ec937daf2231de726cb6689411e48e50abba
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.