This bug was fixed in the package openssh - 1:10.5p1-1ubuntu5
---------------
openssh (1:10.5p1-1ubuntu5) tenacious; urgency=medium
* d/t/control: skip the purge test on i386, sice src:openssh-gssapi is not
built for that architecture (LP: #2170583)
* Bump version to 1ubuntu5, because 1ubuntu4 was burned in a previous upload
that got removed from tenacious-proposed
openssh (1:10.5p1-1ubuntu3.1) stonking-security; urgency=medium
* SECURITY UPDATE: sftp directory traversal
- debian/patches/CVE-2026-106552.patch: upstream: sftp: be stricter in
accepting paths returned by the in sftp-client.c, sftp.c.
- CVE-2026-106552
* SECURITY UPDATE: incorrect GSSAPIAuthentication auth persistence
- debian/patches/CVE-2026-106553-1.patch: upstream: Reset GSSAPI client
state before authentication in auth2.c, gss-serv.c, monitor.c, ssh-gss.h.
- debian/patches/CVE-2026-106553-2.patch: upstream: Only store GSSAPI creds
when authn succeeds in gss-serv.c, ssh-gss.h.
- debian/patches/CVE-2026-106553-3.patch: upstream:
ssh_gssapi_cleanup_global_client() needs a prototype in gss-serv.c, ssh-
gss.h.
- CVE-2026-106553
- CVE-2026-106555
* SECURITY UPDATE: incorrect use of LZ77 dictionary coder
- debian/patches/CVE-2026-106582.patch: upstream: Disable LZ77 dictionary
coder to avoid a potential in packet.c.
- CVE-2026-106582
* SECURITY UPDATE: invalid chars in command-line username
- debian/patches/CVE-2026-106583-1.patch: upstream: Further restrict the
characters allowed in a command-line in readconf.c.
- debian/patches/CVE-2026-106583-2.patch: upstream: Add test for
proxycommand percent expansions. in regress/percent.sh.
- debian/patches/CVE-2026-106583-3.patch: avoid ksh-ism in regress test in
regress/percent.sh.
- CVE-2026-106583
* SECURITY UPDATE: incorrect cert expiry in ssh-keygen
- debian/patches/CVE-2026-106584.patch: upstream: Correct handling of DST
when converting dates in misc.c.
- CVE-2026-106584
* SECURITY UPDATE: missing maximum packet length check
- debian/patches/CVE-2026-106585.patch: upstream: Check that compressed
payloads don't inflate beyond the in packet.c.
- CVE-2026-106585
* SECURITY UPDATE: incorrect restrict keyword usage in tunnel forwarding
- debian/patches/CVE-2026-106586-1.patch: upstream: Propagate
authorized_keys "resrict" keyword in auth-options.c.
- debian/patches/CVE-2026-106586-2.patch: upstream: correctly check
sshauthopt->restricted merging in regress/unittests/authopt/tests.c.
- debian/patches/CVE-2026-106586-3.patch: upstream: simpler in
regress/unittests/authopt/tests.c.
- CVE-2026-106586
* SECURITY UPDATE: "none" value confusion in options
- debian/patches/CVE-2026-106587.patch: upstream: Correctly handle some
options that accept "none" in servconf.c.
- CVE-2026-106587
openssh (1:10.5p1-1ubuntu3) stonking; urgency=medium
[ Colin Watson ]
* d/openssh-{server,client}.postrm: Skip purging if
openssh-{client,server}-gssapi is installed
(Closes: #1148080 LP: #2169738)
* d/t/control, d/t/purge-keeps-config-with-counterpart: test to validate
that switching to the openssh counterparts and then purging the
removed packages keeps the configuration intact
-- Andreas Hasenack <[email protected]> Thu, 22 Oct 2026
09:25:32 -0300
** Changed in: openssh (Ubuntu)
Status: In Progress => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106552
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106553
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106555
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106582
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106583
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106584
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106585
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106586
** CVE added: https://cve.org/CVERecord?id=CVE-2026-106587
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2170583
Title:
Skip purge-keeps-config-with-counterpart test on i386
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2170583/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
