Bugs fixes in "openssh"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-106582 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing th | 2026-10-14 |
| CVE | CVE-2026-106555 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. | 2026-10-14 |
| CVE | CVE-2026-106553 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. | 2026-10-14 |
| CVE | CVE-2026-106552 | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive cop | 2026-10-14 |
| Launchpad | 2150273 | [SRU] SSH fails on IPA-joined systems when logging in with an alternative UPN suffix | 2026-10-07 |
| Launchpad | 2150273 | [SRU] SSH fails on IPA-joined systems when logging in with an alternative UPN suffix | 2026-10-07 |
| Launchpad | 2150273 | [SRU] SSH fails on IPA-joined systems when logging in with an alternative UPN suffix | 2026-09-16 |
| Launchpad | 2150273 | [SRU] SSH fails on IPA-joined systems when logging in with an alternative UPN suffix | 2026-09-16 |
| CVE | CVE-2026-73283 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. | 2026-09-03 |
| CVE | CVE-2026-73282 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. | 2026-09-03 |
| CVE | CVE-2026-73281 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens | 2026-09-03 |
| CVE | CVE-2026-73283 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. | 2026-09-03 |
| CVE | CVE-2026-73282 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. | 2026-09-03 |
| CVE | CVE-2026-73281 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens | 2026-09-03 |
| CVE | CVE-2026-73283 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. | 2026-09-03 |
| CVE | CVE-2026-73282 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. | 2026-09-03 |
| CVE | CVE-2026-73281 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens | 2026-09-03 |
| CVE | CVE-2026-73283 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. | 2026-09-03 |
| CVE | CVE-2026-73282 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. | 2026-09-03 |
| CVE | CVE-2026-73281 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens | 2026-09-03 |
About
-
Send Feedback to @ubuntu_updates
