openSUSE OpenSSH 9.6p1 Fixes SSH Forwarding and Agent Issues

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

This update for openssh fixes the following issues:

* CVE-2026-73281: refused binding requests on locked SSH agents can allow

destination restriction bypasses (bsc#1275075).

* CVE-2026-73282: unsynchronized remote forwarding updates in SSH client

multiplexing can cause use-after-free (bsc#1275074).

* CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can

allow administrative security policy bypasses (bsc#1275079).

Changes for openssh: \- Included mentions of the configuration drop-in

directories (bsc#1259462).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4827

zypper in -t patch SUSE-2026-4827

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4827

* Desktop Applications Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4827

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4827

* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)

* openssh-debugsource-9.6p1-150600.6.52.2

* openssh-common-9.6p1-150600.6.52.2

* openssh-fips-9.6p1-150600.6.52.2

* openssh-server-9.6p1-150600.6.52.2

* openssh-askpass-gnome-9.6p1-150600.6.52.1

* openssh-helpers-9.6p1-150600.6.52.2

* openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2

* openssh-debuginfo-9.6p1-150600.6.52.2

* openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1

* openssh-clients-9.6p1-150600.6.52.2

* openssh-common-debuginfo-9.6p1-150600.6.52.2

* openssh-clients-debuginfo-9.6p1-150600.6.52.2

* openssh-server-debuginfo-9.6p1-150600.6.52.2

* openssh-helpers-debuginfo-9.6p1-150600.6.52.2

* openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1

* openssh-9.6p1-150600.6.52.2

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)

* openssh-debugsource-9.6p1-150600.6.52.2

* openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1

* openssh-common-9.6p1-150600.6.52.2

* openssh-fips-9.6p1-150600.6.52.2

*

*

*

*

*

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases