USN-8721-1:OpenSSH 漏洞

Ubuntu 发布安全公告 USN-8721-1,涉及 OpenSSH 漏洞。

受影响的 Ubuntu 发行版与修复后的软件包版本

发行版 软件包 修复版本 获取方式
26.04 LTS resolute openssh-client 1:10.2p1-2ubuntu3.6 standard update
26.04 LTS resolute openssh-server 1:10.2p1-2ubuntu3.6 standard update
24.04 LTS noble openssh-client 1:9.6p1-3ubuntu13.19 standard update
24.04 LTS noble openssh-server 1:9.6p1-3ubuntu13.19 standard update
22.04 LTS jammy openssh-client 1:8.9p1-3ubuntu0.17 standard update
22.04 LTS jammy openssh-server 1:8.9p1-3ubuntu0.17 standard update

公告未逐一说明上述 CVE 与各发行版、各软件包的对应关系。

公告原文中的受保护字段标记

{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8721-1",
"version": null,
"announcementDate": "2026-09-03 12:30:15+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8721-1",
"cves": [
"CVE-2026-73281",
"CVE-2026-73282",
"CVE-2026-73283"
],
"fixedPackages": [
"release": "26.04 LTS resolute",
"package": "openssh-client",
"version": "1:10.2p1-2ubuntu3.6",
"access": "standard update"
},
"package": "openssh-server",
"release": "24.04 LTS noble",
"version": "1:9.6p1-3ubuntu13.19",
"release": "22.04 LTS jammy",
"version": "1:8.9p1-3ubuntu0.17",
}
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."