Vulnerabilidades de OpenSSH

Vulnerabilidades del servidor y el cliente SSH de OpenBSD. Ahora mismo seguimos 4 avisos, 1 con versión corregida publicada.

CVE-2026-73281 Baja 3.5 2026-08-11

OpenSSH

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction…

Sin parche todavía.

CVE-2026-73282 Media 4.8 2026-08-11

OpenSSH

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Sin parche todavía.

CVE-2026-73283 Baja 2.5 2026-08-11

OpenSSH

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Sin parche todavía.

CVE-2026-59995 Sin clasificar 2026-07-13

OpenSSH

Vulnerabilidades de openssh

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

Datos de OSV.dev, publicados bajo licencia CC BY 4.0. Se recopilan a diario y se filtran al software que seguimos; así se elabora la lista.