openSUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

This update for openssh fixes the following issues:

* CVE-2026-73282: unsynchronized remote forwarding updates in SSH client

multiplexing can cause use-after-free (bsc#1275074).

* CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can

allow administrative security policy bypasses (bsc#1275079).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-4811

* SUSE Linux Enterprise Server for SAP Applications 15 SP4

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4811

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4811

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4811

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2026-4811

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2026-4811

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4811

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch...

* openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64)

* openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1

* openssh-common-8.4p1-150300.3.68.2

* openssh-server-8.4p1-150300.3.68.2

* openssh-debugsource-8.4p1-150300.3.68.2

* openssh-common-debuginfo-8.4p1-150300.3.68.2

* openssh-debuginfo-8.4p1-150300.3.68.2

* openssh-clients-debuginfo-8.4p1-150300.3.68.2

* openssh-helpers-debuginfo-8.4p1-150300.3.68.2

* openssh-8.4p1-150300.3.68.2

* openssh-fips-8.4p1-150300.3.68.2

* openssh-clients-8.4p1-150300.3.68.2

* openssh-cavs-debuginfo-8.4p1-150300.3.68.2

* openssh-server-debuginfo-8.4p1-150300.3.68.2

* openssh-helpers-8.4p1-150300.3.68.2

* openssh-cavs-8.4p1-150300.3.68.2

* openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1

* openssh-askpass-gnome-8.4p1-150300.3.68.1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)

* openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1

* openssh-common-8.4p1-150300.3.68.2

* openssh-server-8.4p1-150300.3.68.2

*

*

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases