Release date:
2026-09-14 13:17:06 UTC
Description:
* SECURITY UPDATE: Use-after-free on reallocated remote forwarding data
- debian/patches/CVE-2026-73282.patch: pass an index-based
rfwd_confirm_ctx to client_register_global_confirm() instead of a
pointer into the options.remote_forwards array, so that a remote
forwarding added over the local multiplexing socket cannot leave
ssh_confirm_remote_forward() holding a pointer invalidated by the
array reallocation, in ssh.c
- CVE-2026-73282
Updated packages:
-
openssh-client_8.2p1-4ubuntu0.13+tuxcare.els5_amd64.deb
sha:1434bce5b98ba276e11fb8e901054f44f9e9a204
-
openssh-server_8.2p1-4ubuntu0.13+tuxcare.els5_amd64.deb
sha:95375182cbc2bce0a7c429e742564ce5b348eb71
-
openssh-sftp-server_8.2p1-4ubuntu0.13+tuxcare.els5_amd64.deb
sha:ad37b556274f4f5860a0bd9e3e786bde317381b9
-
openssh-tests_8.2p1-4ubuntu0.13+tuxcare.els5_amd64.deb
sha:f49a4e78a18f810c804701bc6298cc59ea39171d
-
ssh_8.2p1-4ubuntu0.13+tuxcare.els5_all.deb
sha:3611fd3827b7ba0ffd6dd40ea8f4b9c9a1c152e6
-
ssh-askpass-gnome_8.2p1-4ubuntu0.13+tuxcare.els5_amd64.deb
sha:e64d8f8a09b26993b625391f311407a77731847b
-
openssh-client_8.2p1-4ubuntu0.13+tuxcare.els5_arm64.deb
sha:139af007f78a67da692f480bdf74e16aeba7cfa3
-
openssh-server_8.2p1-4ubuntu0.13+tuxcare.els5_arm64.deb
sha:01f4c0db2d11c46664aa4f0f2e8c4545a846aca5
-
openssh-sftp-server_8.2p1-4ubuntu0.13+tuxcare.els5_arm64.deb
sha:ccfaec647b17192152a802328383e0887cac1c0f
-
openssh-tests_8.2p1-4ubuntu0.13+tuxcare.els5_arm64.deb
sha:a1f8cf0274fae2f44eb76b5fdaaf510decb00dde
-
ssh-askpass-gnome_8.2p1-4ubuntu0.13+tuxcare.els5_arm64.deb
sha:bce36d70400cd55e44a686f112670372a352c360
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
