This bug was fixed in the package openssh - 1:10.5p1-1ubuntu2
---------------
openssh (1:10.5p1-1ubuntu2) stonking; urgency=medium
* d/p/lp-2150273-openssh-pam-upn: Fix PAM user mismatch with
alternative UPN suffixes by comparing account UIDs instead of
username strings (LP: #2150273)
* d/t/password-auth-no-pam: create /run/sshd for the custom test
service (LP: #2166924)
openssh (1:10.5p1-1ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2166081). Remaining changes:
- debian/rules: modify dh_installsystemd invocations for
socket-activated sshd
- debian/README.Debian: document systemd socket activation.
- debian/.gitignore: drop file
- debian/openssh-server.ucf-md5sum: update for Ubuntu delta
- d/p/systemd-socket-activation.patch:
+ Fix sshd re-execution behavior when socket activation is used
+ Adapt sshd-session and sshd-auth for systemd socket activation
+ Allow AF_VSOCK sockets
- debian/tests/systemd-socket-activation: Add autopkgtest for systemd socket
activation functionality.
- debian/patches: Immediately report interactive instructions to PAM clients
- debian/control: Build-Depends: systemd-dev
- d/p/sshd-socket-generator.patch: add generator for socket activation
- debian/openssh-server.install: install sshd-socket-generator
- debian/openssh-server.postinst: restart whichever systemd unit is enabled
- d/t/sshd-socket-generator: add dep8 test for sshd-socket-generator
- ssh.socket: adjust unit for socket activation by default
- debian/rules: explicitly enable LTO
- d/p/test-set-UsePAM-no-on-some-tests.patch: set UsePAM=no for some tests
- d/openssh-server.links: add full sshd.service -> ssh.service alias
(LP #2087949)
- document /etc/ssh/sshd_config.d/*.conf better in sshd_config
(LP #2088207)
- d/rules,d/control: do not build with wtmpdb support
- d/t/control: add breaks-testbed restriction to tests
- d/tests: do not fail when $HOME/.ssh exists
- test: workaround test failure caused by uutils dd (LP #2125943)
- d/rules: only act on files from bin:openssh-tests if it's being
built (LP #2165026)
- d/t/control: disable regress test on i386, since bin:openssh-tests
is not built for that architecture in Ubuntu
* Dropped:
- d/t/password-auth-no-pam: create the privilege separation
directory manually for this test, as it doesn't use the systemd
service unit to start sshd
[Not needed since 1:10.5p1-1]
openssh (1:10.5p1-1) unstable; urgency=medium
* New upstream release (closes: #1144192):
- CVE-2026-73281: ssh-agent(1): fix an interaction between agent locking
and the [email protected] extension that is used to identify
forwarded agents. These binding requests were refused when the agent
was locked, with the result that operations that were intended to be
limited to local use only could be performed remotely, including the
ability to add PKCS#11 tokens and make use of keys that had
destination restrictions applied.
- CVE-2026-73282: ssh(1): avoid potential realloc use-after-free in the
client if a remote forwarding is added via the local session
multiplexing socket while a remote forwarding open request is pending
with the server.
- CVE-2026-73283: sshd(8): make the authorized_keys "restrict" keyword
apply correctly to tunnel forwarding too (which is administratively
disabled by default).
- ssh-keygen(1): add ability to set or clear the touch-required and
verify-required flags on FIDO private keys when resetting a private
key's passphrase.
- ssh(1): tweak ordering of certificates tried during pubkey
authentication to prefer FIDO keys that do not require user presence
(touch) first, and FIDO keys that require user verification via PIN or
biometrics last. This effectively tries low-friction authenticators
before higher friction ones.
- ssh(1): add a "ssh -Z user@host" mode that prints the keys that will
be tried for public key authentication in the order that they will be
used.
- sshd(8) use setproctitle(3) to identify sshd-session when it's acting
as a post-authentication monitor.
- ssh-keyscan(1): make reading the server banner a non-blocking
operation to prevent a stuck server from blocking a many-host keyscan
from proceeding.
- sshd(8): use sshpkt_fatal() instead of plain fatal() for errors in the
packet code as this provides context of the failing peer (address,
port, user, etc).
- sshd(8): when signing hostkey proofs for a client UpdateHostKeys
request, allow each hostkey to perform at most one signature
operation.
- ssh-keygen(1): pass back errors from ed25519 key generation, which
theoretically can fail.
- sshd(8): move check of public key type against allowed algorithms to
before parsing of the key sent by the peer. This removes at least some
key parsing and verification paths from the pre-auth attack surface.
- ssh-keygen(1): fix double frees (impossible to reach outside of a test
harness), and also use freezero where possible.
- sshd(8): fix ChannelTimeout and RekeyLimit not being applied in
sshd_config Match blocks.
- sshd(8): in sshd config dump mode, write all directives in mixed case
for consistency.
- sshd(8): re-allow PAMServiceName inside a Match block, which was
incorrectly disabled during a refactoring in openssh-10.4.
openssh (1:10.4p1-5ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2164936). Remaining changes:
- debian/rules: modify dh_installsystemd invocations for
socket-activated sshd
- debian/README.Debian: document systemd socket activation.
- debian/.gitignore: drop file
- debian/openssh-server.ucf-md5sum: update for Ubuntu delta
- d/p/systemd-socket-activation.patch:
+ Fix sshd re-execution behavior when socket activation is used
+ Adapt sshd-session and sshd-auth for systemd socket activation
+ Allow AF_VSOCK sockets
- debian/tests/systemd-socket-activation: Add autopkgtest for systemd socket
activation functionality.
- debian/patches: Immediately report interactive instructions to PAM clients
- debian/control: Build-Depends: systemd-dev
- d/p/sshd-socket-generator.patch: add generator for socket activation
- debian/openssh-server.install: install sshd-socket-generator
- debian/openssh-server.postinst: restart whichever systemd unit is enabled
- d/t/sshd-socket-generator: add dep8 test for sshd-socket-generator
- ssh.socket: adjust unit for socket activation by default
- debian/rules: explicitly enable LTO
- d/p/test-set-UsePAM-no-on-some-tests.patch: set UsePAM=no for some tests
- d/openssh-server.links: add full sshd.service -> ssh.service alias
(LP #2087949)
- document /etc/ssh/sshd_config.d/*.conf better in sshd_config
(LP #2088207)
- d/rules,d/control: do not build with wtmpdb support
- d/t/control: add breaks-testbed restriction to tests
- d/tests: do not fail when $HOME/.ssh exists
- test: workaround test failure caused by uutils dd (LP #2125943)
- d/t/password-auth-no-pam: create the privilege separation
directory manually for this test, as it doesn't use the systemd
service unit to start sshd
- d/rules: only act on files from bin:openssh-tests if it's being
built (LP #2165026)
* Added:
- d/openssh-server.ucf-md5sum: update for 1:10.4p1-5ubuntu1
- d/t/control: disable regress test on i386, since bin:openssh-tests
is not built for that architecture in Ubuntu
* Dropped:
- d/t/ssh-gssapi: disable -e in cleanup()
[Test no longer shipped in this source package]
openssh (1:10.4p1-5) unstable; urgency=medium
* Drop GSS-API authentication and key exchange support, to reduce
pre-authentication attack surface. Users who need these features should
install openssh-client-gssapi or openssh-server-gssapi instead.
openssh (1:10.4p1-4ubuntu2) stonking; urgency=medium
* d/rules: only act on files from bin:openssh-tests if it's being
built (LP: #2165026)
openssh (1:10.4p1-4ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2164221). Remaining changes:
- debian/rules: modify dh_installsystemd invocations for
socket-activated sshd
- debian/README.Debian: document systemd socket activation.
- debian/.gitignore: drop file
- debian/openssh-server.ucf-md5sum: update for Ubuntu delta
- d/p/systemd-socket-activation.patch:
+ Fix sshd re-execution behavior when socket activation is used
+ Adapt sshd-session and sshd-auth for systemd socket activation
+ Allow AF_VSOCK sockets
- debian/tests/systemd-socket-activation: Add autopkgtest for systemd socket
activation functionality.
- debian/patches: Immediately report interactive instructions to PAM clients
- debian/control: Build-Depends: systemd-dev
- d/p/sshd-socket-generator.patch: add generator for socket activation
- debian/openssh-server.install: install sshd-socket-generator
- debian/openssh-server.postinst: restart whichever systemd unit is enabled
- d/t/sshd-socket-generator: add dep8 test for sshd-socket-generator
- ssh.socket: adjust unit for socket activation by default
- debian/rules: explicitly enable LTO
- d/t/ssh-gssapi: disable -e in cleanup()
- d/p/test-set-UsePAM-no-on-some-tests.patch: set UsePAM=no for some tests
- d/openssh-server.links: add full sshd.service -> ssh.service alias
(LP #2087949)
- document /etc/ssh/sshd_config.d/*.conf better in sshd_config
(LP #2088207)
- d/rules,d/control: do not build with wtmpdb support
- d/t/control: add breaks-testbed restriction to tests
- d/tests: do not fail when $HOME/.ssh exists
- test: workaround test failure caused by uutils dd (LP #2125943)
* Added:
- d/t/password-auth-no-pam: create the privilege separation
directory manually for this test, as it doesn't use the systemd
service unit to start sshd
openssh (1:10.4p1-4) unstable; urgency=medium
* Add missing test dependencies.
openssh (1:10.4p1-3) unstable; urgency=medium
* Remove most openssh-* dependencies from openssh-tests.
* Add Slovak debconf translation (thanks, Damian Daniel; closes:
#1142938).
* Remove references to rsh/rcp/rlogin/rshd from package descriptions.
openssh (1:10.4p1-2) unstable; urgency=medium
[ Alexander Fisher ]
* Build-Depends: add libcrypt-dev so crypt() is detected at build time,
fixing password authentication with UsePAM=no (closes: #1142354).
* debian/tests: add password-auth-no-pam regression test.
openssh (1:10.4p1-1) unstable; urgency=medium
[ Sven Joachim ]
* Make doc symlinks relative on upgrade from 1:10.3p1-5 (closes:
#1141420).
[ Colin Watson ]
* New upstream release:
- CVE-2026-59995: sftp(1): when downloading files on the command-line
using "sftp host:/path .", a malicious server could cause the file to
be downloaded to an unexpected location. This issue was identified by
the Swival Security Scanner.
- CVE-2026-59996: scp(1): when copying files between two remote
destinations, do not allow a malicious server to write files to the
parent directory of the intended target directory. This issue was
identified by the Swival Security Scanner.
- CVE-2026-59997: sshd(8): when using the "internal-sftp" SFTP server
implementation (this is not the default), long command lines were
previously truncated silently after the 9th argument. If a
security-relevant option was in the 10th or later position, it would
be discarded. Reported by Steve Caffrey.
- CVE-2026-59998: sshd(8): add a documentation note to mention that the
GSSAPIStrictAcceptorCheck option is ineffective when the server is
joined to a Windows Active Directory. Reported by Yarin Aharoni of
Safebreach.
- CVE-2026-59999: sshd(8): DisableForwarding=yes didn't override
PermitTunnel=yes as it was documented to do. Note that PermitTunnel is
not enabled by default. Reported independently by Huzaifa Sidhpurwala
of Redhat and Marko Jevtic.
- CVE-2026-60000: sshd(8): avoid a potential pre-authentication denial
of service when GSSAPIAuthentication was enabled (this feature is off
by default). This was not mitigated by MaxAuthTries, but would be
penalised by PerSourcePenalties. This was reported by Manfred Kaiser
of the milCERT AT (Austrian Ministry of Defence).
- CVE-2026-60001: sshd(8): fix a number of cases where the minimum
authentication delay was not being enforced. Reported by the Orange
Cyberdefense Vulnerability Team.
- CVE-2026-60002: ssh(1): fix a possible client-side use-after-free if
the server changes its host key during a key reexchange. This was
reported by Zhenpeng (Leo) Lin of Depthfirst.
- All: add experimental support for a composite post-quantum signature
scheme that combines ML-DSA 44 and Ed25519 as specified in
draft-miller-sshm-mldsa44-ed25519-composite-sigs. This scheme is not
enabled by default. To use it, you'll need to add it to
HostKeyAlgorithms, PubkeyAcceptedAlgorithms, etc. Keys may be
generated using "ssh-keygen -t mldsa44-ed25519".
- ssh(1), sshd(8): replace the wildcard pattern matcher with an
implementation based on an NFA. This avoids exponential worst-case
behaviour for the old implementation.
- ssh-agent(1): fix incorrect reply to "query" SSH_AGENTC_EXTENSION
requests.
- sshd(8): avoid sending observably different messages for valid vs
invalid users in GSSAPIAuthentication (disabled by default).
- ssh(1), sshd(8): fix several bugs that incorrectly classified bulk
traffic as interactive.
- ssh-keygen(1), ssh-add(1): skip unsupported key types when downloading
resident keys from a FIDO token. Previously, downloads would abort
when one was encountered.
- ssh(1): fix a potential use-after-free on an error path if
cipher_init() fails.
- sshd(8): perform stricter encoding and validation of transport state
passed between sshd privilege separation subprocesses. This somewhat
further hardens the server against attacks on sshd-auth or
sshd-session subprocesses.
- ssh-agent(1): avoid possible runtime denial of service by enforcing
some limits on the length of usernames in key use constraints.
- sftp(1): fix two separate one-byte out-of-bounds reads, in
SSH2_FXP_REALPATH and batch command processing.
- sftp-server(8): disallow use of the copy-data extension to read and
write to the same inode simultaneously.
- ssh(1), sshd(8): avoid strlen(NULL) crash if an X11 channel was
created before the x11-req SSH_MSG_CHANNEL_REQUEST was sent.
- sftp(1), scp(1): avoid a situation where sftp_download() could get
stuck in a loop if a broken server repeatedly returned zero length
while reading a file.
- ssh(1): avoid leaking DNS0x20 case-randomised names into names
canonicalised using CanonicalizePermittedCNAMEs.
- sftp-server(8): avoid truncation of pathnames passed to lstat() during
SSH_FXP_REALPATH handling on systems where PATH_MAX is not the actual
max.
- ssh(1), sshd(8): correct arming of poll(2) event masks for some
socket-type channels.
- sshd(8): major refactor of sshd_config parsing and management code, to
allow for more exact serialisation/deserialisation across privilege
separation boundaries.
- ssh-add(1): open connection to the agent only after getopt()
processing has completed, to give options like "-v" a chance to
display debug information about this operation.
- sshd(8): differentiate between execution failures and a subsystem that
was not found when logging why a subsystem failed to start.
- All: use safer idioms for timegm(3) and mktime(3) error detection.
- ssh(1), sshd(8): avoid accepting invalid cipher or MAC lists in config
files or command-line arguments. This could cause runtime failures
later.
- ssh(1): fix NULL deref crash during pubkey auth when using a PEM style
private key with no corresponding .pub key adjacent to it (closes:
#1134814).
- sshd(8): don't print an error message when trying to load a host
private key when PKCS#11 keys are in use, as these don't need the
private half on the filesystem.
- All: don't use deprecated ERR_load_crypto_strings().
- ssh(1): properly report errors during configuration default setting.
- ssh(1): use correct directive name (Match instead of Host) in error
message.
- sftp(1): fix "ls -ln" which was not correctly showing numeric UID/GIDs
but rather user and group names.
- sshd(8): avoid possible NULL dereference if an allocation fails during
config parsing.
- All: fix ineffective guards against loading overly large public keys
in several places.
- sftp(1): ensure file descriptors used by sftp to communicate to its
ssh(1) subprocess don't leak into executed subprocesses (e.g. via
"!").
- Sync fmt_scaled.c with OpenBSD upstream, picking up an exactness fix
for large exponents.
- sshd(8): remove duplicate sandbox entry for clock_gettime64.
- Sync getrrsetbyname.c with OpenBSD upstream, picking up robustness
fixes.
- Fix a number of memory leaks on error paths in the portability code.
- Revise the README.privsep documentation to reflect sshd's recent
switch to a multi-binary model.
openssh (1:10.3p1-9) unstable; urgency=medium
* openssh-client Conflicts: openssh-server (<< 1:10.3p1-6~) (closes:
#1141550).
openssh (1:10.3p1-8) unstable; urgency=medium
* d/copyright: Add some missing authors.
* Standards-Version: 4.7.4.
* openssh-tests: Make a couple more scripts executable.
openssh (1:10.3p1-7) unstable; urgency=medium
* Reupload with binaries, since openssh-common is new.
openssh (1:10.3p1-6) unstable; urgency=medium
* Move documentation to a new openssh-common package (closes: #1070098).
* Remove dependency on openssh-client{,-gssapi} from
openssh-server{,-gssapi} (closes: #699473).
* Use --link-doc on all packages.
* Move ssh-keygen and openssh-{pkcs11,sk}-helper to openssh-common.
openssh (1:10.3p1-5) unstable; urgency=medium
[ Johannes Schauer Marin Rodrigues ]
* Support DPKG_ROOT.
[ Colin Watson ]
* d/copyright: Significantly rework to be lrc-clean.
[ Roland C. Dowdeswell ]
* Fix GSS C25519 server blob bounds check.
-- Finn Rayk Gartner <[email protected]> Wed, 09 Sep 2026
21:08:58 +0200
** Changed in: openssh (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-59995
** CVE added: https://cve.org/CVERecord?id=CVE-2026-59996
** CVE added: https://cve.org/CVERecord?id=CVE-2026-59997
** CVE added: https://cve.org/CVERecord?id=CVE-2026-59998
** CVE added: https://cve.org/CVERecord?id=CVE-2026-59999
** CVE added: https://cve.org/CVERecord?id=CVE-2026-60000
** CVE added: https://cve.org/CVERecord?id=CVE-2026-60001
** CVE added: https://cve.org/CVERecord?id=CVE-2026-60002
** CVE added: https://cve.org/CVERecord?id=CVE-2026-73281
** CVE added: https://cve.org/CVERecord?id=CVE-2026-73282
** CVE added: https://cve.org/CVERecord?id=CVE-2026-73283
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2166924
Title:
Autopkgtest failures after stonking merge
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2166924/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
