An update for openssh is now available for openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3673 Final 1.0 1.0 2026-09-05 Initial 2026-09-05 2026-09-05 openEuler SA Tool V1.0 2026-09-05 openssh security update An update for openssh is now available for openEuler-24.03-LTS-SP1 An open source implementation of SSH protocol version 2 Security Fix(es): In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the (CVE-2026-73281) An update for openssh is now available for openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Low openssh https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3673 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-73281 https://nvd.nist.gov/vuln/detail/CVE-2026-73281 openEuler-24.03-LTS-SP1 openssh-9.6p1-21.oe2403sp1.aarch64.rpm openssh-askpass-9.6p1-21.oe2403sp1.aarch64.rpm openssh-clients-9.6p1-21.oe2403sp1.aarch64.rpm openssh-debuginfo-9.6p1-21.oe2403sp1.aarch64.rpm openssh-debugsource-9.6p1-21.oe2403sp1.aarch64.rpm openssh-keycat-9.6p1-21.oe2403sp1.aarch64.rpm openssh-server-9.6p1-21.oe2403sp1.aarch64.rpm pam_ssh_agent_auth-0.10.4-5.21.oe2403sp1.aarch64.rpm openssh-9.6p1-21.oe2403sp1.src.rpm openssh-9.6p1-21.oe2403sp1.x86_64.rpm openssh-askpass-9.6p1-21.oe2403sp1.x86_64.rpm openssh-clients-9.6p1-21.oe2403sp1.x86_64.rpm openssh-debuginfo-9.6p1-21.oe2403sp1.x86_64.rpm openssh-debugsource-9.6p1-21.oe2403sp1.x86_64.rpm openssh-keycat-9.6p1-21.oe2403sp1.x86_64.rpm openssh-server-9.6p1-21.oe2403sp1.x86_64.rpm pam_ssh_agent_auth-0.10.4-5.21.oe2403sp1.x86_64.rpm openssh-help-9.6p1-21.oe2403sp1.noarch.rpm In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the 2026-09-05 CVE-2026-73281 openEuler-24.03-LTS-SP1 Low 3.5 AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N openssh security update 2026-09-05 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3673