Package "ssh"
| Name: |
ssh
|
Description: |
secure shell client and server (metapackage)
|
| Latest version: |
1:9.6p1-3ubuntu13.20 |
| Release: |
noble (24.04) |
| Level: |
security |
| Repository: |
main |
| Head package: |
openssh |
| Homepage: |
https://www.openssh.com/ |
Links
Download "ssh"
Other versions of "ssh" in Noble
Changelog
|
openssh (1:9.6p1-3ubuntu13.20) noble-security; urgency=medium
* SECURITY UPDATE: sftp directory traversal
- debian/patches/CVE-2026-106552-pre1.patch: upstream: similar to scp, fix
implicit destination path selection in sftp.c.
- debian/patches/CVE-2026-106552.patch: upstream: sftp: be stricter in
accepting paths returned by the in sftp-client.c, sftp.c.
- CVE-2026-106552
* SECURITY UPDATE: incorrect GSSAPIAuthentication auth persistence
- debian/patches/CVE-2026-106553-1.patch: upstream: Reset GSSAPI client
state before authentication in auth2.c, gss-serv.c, monitor.c, ssh-gss.h.
- debian/patches/CVE-2026-106553-2.patch: upstream: Only store GSSAPI creds
when authn succeeds in gss-serv.c, ssh-gss.h.
- debian/patches/CVE-2026-106553-3.patch: upstream:
ssh_gssapi_cleanup_global_client() needs a prototype in gss-serv.c, ssh-
gss.h.
- CVE-2026-106553
- CVE-2026-106555
* SECURITY UPDATE: incorrect use of LZ77 dictionary coder
- debian/patches/CVE-2026-106582.patch: upstream: Disable LZ77 dictionary
coder to avoid a potential in packet.c.
- CVE-2026-106582
* SECURITY UPDATE: invalid chars in command-line username
- debian/patches/CVE-2026-106583-1.patch: upstream: Further restrict the
characters allowed in a command-line in readconf.c.
- debian/patches/CVE-2026-106583-2.patch: upstream: Add test for
proxycommand percent expansions. in regress/percent.sh.
- debian/patches/CVE-2026-106583-3.patch: avoid ksh-ism in regress test in
regress/percent.sh.
- CVE-2026-106583
* SECURITY UPDATE: incorrect cert expiry in ssh-keygen
- debian/patches/CVE-2026-106584.patch: upstream: Correct handling of DST
when converting dates in misc.c.
- CVE-2026-106584
* SECURITY UPDATE: missing maximum packet length check
- debian/patches/CVE-2026-106585.patch: upstream: Check that compressed
payloads don't inflate beyond the in packet.c.
- CVE-2026-106585
* SECURITY UPDATE: incorrect restrict keyword usage in tunnel forwarding
- debian/patches/CVE-2026-106586-1.patch: upstream: Propagate
authorized_keys "resrict" keyword in auth-options.c.
- debian/patches/CVE-2026-106586-2.patch: upstream: correctly check
sshauthopt->restricted merging in regress/unittests/authopt/tests.c.
- debian/patches/CVE-2026-106586-3.patch: upstream: simpler in
regress/unittests/authopt/tests.c.
- CVE-2026-106586
* SECURITY UPDATE: "none" value confusion in options
- debian/patches/CVE-2026-106587.patch: upstream: Correctly handle some
options that accept "none" in servconf.c.
- CVE-2026-106587
-- Marc Deslauriers Thu, 08 Oct 2026 13:19:18 -0400
|
| Source diff to previous version |
| CVE-2026-106552 |
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive cop |
| CVE-2026-106553 |
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. |
| CVE-2026-106555 |
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. |
| CVE-2026-106582 |
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing th |
| CVE-2026-106583 |
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. |
| CVE-2026-106584 |
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a sligh |
| CVE-2026-106585 |
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed |
| CVE-2026-106586 |
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different |
| CVE-2026-106587 |
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a fe |
|
|
openssh (1:9.6p1-3ubuntu13.19) noble-security; urgency=medium
* SECURITY UPDATE: misinteraction between agent locking and the
extension
- debian/patches/CVE-2026-73281.patch: upstream: Allow session-
requests when the agent is in ssh-agent.c.
- CVE-2026-73281
* SECURITY UPDATE: se-after-free for realloc data
- debian/patches/CVE-2026-73282.patch: upstream: avoid potential realloc
use-after-free in the client if a in ssh.c.
- CVE-2026-73282
* SECURITY UPDATE: restrict keyword did not apply to tunnel forwarding
- debian/patches/CVE-2026-73283.patch: upstream: make authorized_keys
"restrict" keyword apply correctly in serverloop.c.
- CVE-2026-73283
-- Marc Deslauriers Mon, 31 Aug 2026 14:38:29 -0400
|
| Source diff to previous version |
| CVE-2026-73281 |
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens |
| CVE-2026-73282 |
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. |
| CVE-2026-73283 |
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. |
|
|
openssh (1:9.6p1-3ubuntu13.18) noble-security; urgency=medium
* SECURITY UPDATE: sftp downloaded files location issue
- debian/patches/CVE-2026-59995.patch: upstream: avoid download to server-
controlled path when performing in sftp.c.
- CVE-2026-59995
* SECURITY UPDATE: scp parent directory issue
- debian/patches/CVE-2026-59996.patch: upstream: resist that return ".." via
remote glob during in scp.c.
- CVE-2026-59996
* SECURITY UPDATE: internal-sftp ignores more than 9 commandline args
- debian/patches/CVE-2026-59997.patch: upstream: pass >9 commandline
arguments to the internal-sftp server, in session.c.
- CVE-2026-59997
* SECURITY UPDATE: undocumented GSSAPIStrictAcceptorCheck behaviour
- debian/patches/CVE-2026-59998.patch: upstream: mention a caveat regarding
GSSAPIStrictAcceptorCheck in in sshd_config.5.
- CVE-2026-59998
* SECURITY UPDATE: DisableForwarding=yes not taking proper precedence
- debian/patches/CVE-2026-59999.patch: upstream: DisableForwarding=yes
didn't override PermitTunnel=yes in serverloop.c.
- CVE-2026-59999
* SECURITY UPDATE: DoS via MaxAuthTries mishandling
- debian/patches/CVE-2026-60000-1.patch: upstream: Fix multiple RFC 4462
(GSSAPIAuthentication) compliance in auth2-gss.c.
- debian/patches/CVE-2026-60000-2.patch: upstream: unused variables in
auth2-gss.c.
- CVE-2026-60000
* SECURITY UPDATE: minimum authentication delay not always honoured
- debian/patches/CVE-2026-60001.patch: upstream: Fix cases in GSSAPI and
keyboard-interactive in auth.h, auth2-chall.c, auth2-gss.c, auth2.c.
- CVE-2026-60001
* SECURITY UPDATE: Use-after-free during a key re-exchange
- debian/patches/CVE-2026-60002.patch: upstream: fix ownership and lifetime
of several bits of client in ssh.c, sshconnect.c, sshconnect.h,
sshconnect2.c.
- CVE-2026-60002
-- Marc Deslauriers <email address hidden> Thu, 09 Jul 2026 14:16:38 -0400
|
| Source diff to previous version |
| CVE-2026-59995 |
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controll |
| CVE-2026-59996 |
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. |
| CVE-2026-59997 |
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argum |
| CVE-2026-59998 |
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active |
| CVE-2026-59999 |
In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. |
| CVE-2026-60000 |
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) becaus |
| CVE-2026-60001 |
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. |
| CVE-2026-60002 |
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the cl |
|
|
openssh (1:9.6p1-3ubuntu13.16) noble-security; urgency=medium
* SECURITY UPDATE: unexpected scp setuid and setgid
- debian/patches/CVE-2026-35385.patch: clear setuid/setgid bits from
downloaded files in scp.c.
- CVE-2026-35385
* SECURITY UPDATE: command execution via shell metacharacters in username
- debian/patches/CVE-2026-35386-pre1.patch: apply validity rules on
ProxyJump usernames and hostnames in readconf.c, readconf.h, ssh.c.
- debian/patches/CVE-2026-35386.patch: move username check earlier in
ssh.c.
- CVE-2026-35386
* SECURITY UPDATE: use of unintended ECDSA algorithms
- debian/patches/CVE-2026-35387_35414.patch: correctly match ECDSA
signature algorithms against algorithm allowlists in
auth2-hostbased.c, auth2-pubkey.c, sshconnect2.c.
- CVE-2026-35387
* SECURITY UPDATE: missing connection multiplexing confirmation
- debian/patches/CVE-2026-35388.patch: add missing askpass check in
mux.c.
- CVE-2026-35388
* SECURITY UPDATE: authorized_keys principals option mishandling
- debian/patches/CVE-2026-35387_35414.patch: check for commas in
auth2-pubkeyfile.c.
- CVE-2026-35414
-- Marc Deslauriers <email address hidden> Mon, 27 Apr 2026 20:29:48 -0400
|
| Source diff to previous version |
| CVE-2026-35385 |
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download |
| CVE-2026-35386 |
In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the |
| CVE-2026-35387 |
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is |
| CVE-2026-35388 |
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. |
| CVE-2026-35414 |
OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certific |
|
|
openssh (1:9.6p1-3ubuntu13.15) noble-security; urgency=medium
* SECURITY UPDATE: GSSAPI Key Exchange issue
- debian/patches/gssapi.patch: replace incorrect use of
sshpkt_disconnect() with ssh_packet_disconnect() and properly
initialize some vars.
- CVE-2026-3497
* SECURITY UPDATE: Untrusted control characters in usernames
- debian/patches/CVE-2025-61984.patch: refuse usernames that include
control characters in ssh.c.
- CVE-2025-61984
* SECURITY UPDATE: Code execution in ProxyCommand via NULL character
- debian/patches/CVE-2025-61985.patch: don't allow \0 characters in
url-encoded strings in misc.c.
- CVE-2025-61985
-- Marc Deslauriers <email address hidden> Wed, 04 Mar 2026 12:55:04 -0500
|
| CVE-2026-3497 |
Vulnerability in the OpenSSH GSSAPI delta included in various Linux di ... |
| CVE-2025-61984 |
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code |
| CVE-2025-61985 |
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. |
|
About
-
Send Feedback to @ubuntu_updates
