SUSE-SU-2026:4622-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20264622-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:4622-1
Upstream
CVE (8)
  • CVE-2026-77185
  • CVE-2026-93994
  • CVE-2026-93995
  • CVE-2026-93996
  • CVE-2026-94002
  • CVE-2026-94029
  • CVE-2026-94052
  • CVE-2026-94053
Related
CVE (8)
  • CVE-2026-77185
  • CVE-2026-93994
  • CVE-2026-93995
  • CVE-2026-93996
  • CVE-2026-94002
  • CVE-2026-94029
  • CVE-2026-94052
  • CVE-2026-94053
Published
2026-10-12T07:25:50Z
Modified
2026-10-13T10:30:04Z
Summary
Security update for apache-sshd
Details

This update for apache-sshd fixes the following issues:

  • CVE-2026-77185: Asynchronous authentication can bypass signature verification (bsc#1283357).
  • CVE-2026-93994: Repeated-publickey policy bypass on server (bsc#1283352).
  • CVE-2026-93995: Remote execution of JGit 'archive -o=file.zip' can write file on the server (bsc#1283350).
  • CVE-2026-93996: Memory exhaustion DoS via unbounded SCP command line read (bsc#1283348).
  • CVE-2026-94002: Memory exhaustion in SFTP client via unsolicited SFTP replies (bsc#1283347).
  • CVE-2026-94029: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension (bsc#1283346).
  • CVE-2026-94052: LDAP password authentication ineffective (bsc#1283345).
  • CVE-2026-94053: LDAP injection in sshd-ldap (bsc#1283344).

Changes for apache-sshd:

  • Update to upstream version 2.20.0:
  • GH-656 ChannelPipedInputStream: shrink buffer when emptied
  • GH-906 Fix finding a signature factory for BC ed25519 keys
  • GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT requests
  • Allow asynchronous authentication only for password and keyboard-interactive authentication schemes
  • Fix authentication requiring multiple public keys (server-side)
  • Better argument handling in sshd-git
  • More checks in authentication (server-side)
  • Better SCP command handling
  • SFTP client: simplify response message handling
  • Fix check-file-name/check-file-handle SFTP v6 extension
  • Improve LDAP authentication (sshd-ldap)
  • New Features
  • GH-905 Implement the 'from' and 'expiry-time' options in authorized_keys handling in public key authentication (server side)
References

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise Module for Development Tools 15 SP7
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise Server 15 SP4-LTSS
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise Server 15 SP5-LTSS
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise Server 15 SP6-LTSS
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
apache-sshd

Package

Name
apache-sshd
Purl
pkg:rpm/suse/apache-sshd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-150200.5.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "apache-sshd":  "2.20.0-150200.5.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4622-1.json"