Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
74aeea59 by Bastien Roucariès at 2026-10-09T23:47:24+02:00
Openssh/bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2826,18 +2826,21 @@ CVE-2026-106588 (In sshd in OpenSSH through 10.6, use
of the macOS 27 (or later)
CVE-2026-106587 (In sshd in OpenSSH before 10.6, the value "none" for a
configuration o ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
CVE-2026-106586 (In sshd in OpenSSH before 10.6, the restrict keyword (in
authorized_ke ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
CVE-2026-106585 (In sshd and ssh in OpenSSH before 10.6, there is no check for
whether ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
@@ -2849,30 +2852,35 @@ CVE-2026-106584 (In ssh-keygen in OpenSSH before 10.6,
certificates could have i
CVE-2026-106583 (In ssh in OpenSSH before 10.6, a $ or \ character can occur
in a comma ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
CVE-2026-106582 (In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary
coder can b ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
CVE-2026-106555 (In sshd in OpenSSH before 10.6, GSSAPIAuthentication
authentication st ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
CVE-2026-106553 (In sshd in OpenSSH before 10.6, credentials can incorrectly
persist af ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
CVE-2026-106552 (In sftp in OpenSSH before 10.6, a server can trigger
directory travers ...)
- openssh 1:10.6p1-1
[trixie] - openssh <no-dsa> (Minor issue)
+ [bookworm] - openssh <postponed> (Minor issue)
- openssh-gssapi 1:10.6p1-1
[trixie] - openssh-gssapi <no-dsa> (Minor issue)
NOTE: https://www.openssh.org/releasenotes.html#10.6
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74aeea59bb035ce0b2346565a37467459602a0fc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74aeea59bb035ce0b2346565a37467459602a0fc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
