CVE-2019-6110
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...
6.8 MediumPublic exploitFix available
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
24.9%Up 18.7 points since Apr 14, 2021
What each source reports
NVD Score used
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
- Record
CVE-2019-6110- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:N - Weakness
- CWE-838
- Updated
- 2026-11-02
CVE List
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
- Record
CVE-2019-6110- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-838
- Updated
- 2026-11-02
EUVDEUVD-2019-15677
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
- Record
EUVD-2019-15677- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mv2j-4mm8-9xgv
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
- Record
GHSA-mv2j-4mm8-9xgv- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-838
- Updated
- 2026-11-02
OSV
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
- Record
CVE-2019-6110- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-6110
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
- Record
DEBIAN-CVE-2019-6110- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Show 8 moreShow less
OSVUBUNTU-CVE-2019-6110
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
- Record
UBUNTU-CVE-2019-6110- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0091-1 No score
Security update for openssh
This update for openssh fixes the following issues:
Security issues fixed:
- CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571)
- CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816)
- CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818)
- CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0091-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11124-1 No score
openssh-8.4p1-7.4 on GA media
These are all security issues fixed in the openssh-8.4p1-7.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11124-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0125-1 No score
Security update for openssh
This update for openssh fixes the following issues:
Security issue fixed:
- CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571)
- CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816)
- CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818)
- CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821)
- Record
SUSE-SU-2019:0125-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0125-2 No score
Security update for openssh
This update for openssh fixes the following issues:
Security issue fixed:
- CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571)
- CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816)
- CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818)
- CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821)
- Record
SUSE-SU-2019:0125-2- Updated
- 2026-11-02
OSVSUSE-SU-2019:0126-1 No score
Security update for openssh
This update for openssh fixes the following issues:
Security issues fixed:
- CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571)
- CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816)
- CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818)
- CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821)
- Record
SUSE-SU-2019:0126-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0132-1 No score
Security update for openssh
This update for openssh fixes the following issues:
Security issue fixed:
- CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571)
- CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816)
- CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818)
- CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821)
- Record
SUSE-SU-2019:0132-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:13931-1 No score
Security update for openssh
This update for openssh fixes the following issues:
Security issue fixed:
- CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571)
- CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate terminal output via the object name, e.g. by inserting ANSI escape sequences (bsc#1121816)
- CVE-2019-6110: Fixed an issue where the scp client would allow malicious remote SSH servers to manipulate stderr output, e.g. by inserting ANSI escape sequences (bsc#1121818)
- CVE-2019-6111: Fixed an issue where the scp client would allow malicious remote SSH servers to execute directory traversal attacks and overwrite files (bsc#1121821)
- Record
SUSE-SU-2019:13931-1- Updated
- 2026-11-02
Affected products
- openbsd openssh
- netapp element software
- netapp ontap select deploy
- netapp storage automation store
- siemens scalance x204rna eec firmware
- siemens scalance x204rna firmware
- siemens simatic s7-1500 cpu 1518-4 pn/dp mfp
- siemens simatic s7-1500 cpu 1518f-4 pn/dp mfp
- siemens siplus s7-1500 cpu 1518-4 pn/dp mfp
- winscp
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensshDebian:12 |
All versions, plus listed versions 1:10.0p1-11:10.0p1-21:10.0p1-31:10.0p1-41:10.0p1-5 Show 45 moreShow less1:10.0p1-5~bpo12+21:10.0p1-61:10.0p1-71:10.0p1-7~bpo12+11:10.0p1-81:10.1p1-11:10.1p1-21:10.2p1-11:10.2p1-21:10.2p1-2~bpo13+11:10.2p1-31:10.2p1-41:10.2p1-51:10.2p1-61:10.2p1-6~bpo13+11:10.3p1-11:10.3p1-1~bpo13+11:10.3p1-21:10.3p1-31:10.3p1-41:10.3p1-51:10.3p1-71:10.3p1-81:10.3p1-91:10.4p1-11:10.4p1-21:10.4p1-31:10.4p1-41:10.4p1-51:10.5p1-11:10.6p1-11:9.2p1-21:9.2p1-2+deb12u11:9.2p1-2+deb12u101:9.2p1-2+deb12u21:9.2p1-2+deb12u31:9.2p1-2+deb12u41:9.2p1-2+deb12u51:9.2p1-2+deb12u61:9.2p1-2+deb12u71:9.2p1-2+deb12u81:9.2p1-2+deb12u91:9.3p1-11:9.3p1-1+loong641:9.3p2-1 |
None known |
opensshDebian:13 |
All versions, plus listed versions 1:10.0p1-71:10.0p1-7+deb13u11:10.0p1-7+deb13u21:10.0p1-7+deb13u31:10.0p1-7+deb13u4 Show 27 moreShow less1:10.0p1-81:10.1p1-11:10.1p1-21:10.2p1-11:10.2p1-21:10.2p1-2~bpo13+11:10.2p1-31:10.2p1-41:10.2p1-51:10.2p1-61:10.2p1-6~bpo13+11:10.3p1-11:10.3p1-1~bpo13+11:10.3p1-21:10.3p1-31:10.3p1-41:10.3p1-51:10.3p1-71:10.3p1-81:10.3p1-91:10.4p1-11:10.4p1-21:10.4p1-31:10.4p1-41:10.4p1-51:10.5p1-11:10.6p1-1 |
None known |
opensshDebian:14 |
All versions, plus listed versions 1:10.0p1-71:10.0p1-81:10.1p1-11:10.1p1-21:10.2p1-1 Show 23 moreShow less1:10.2p1-21:10.2p1-2~bpo13+11:10.2p1-31:10.2p1-41:10.2p1-51:10.2p1-61:10.2p1-6~bpo13+11:10.3p1-11:10.3p1-1~bpo13+11:10.3p1-21:10.3p1-31:10.3p1-41:10.3p1-51:10.3p1-71:10.3p1-81:10.3p1-91:10.4p1-11:10.4p1-21:10.4p1-31:10.4p1-41:10.4p1-51:10.5p1-11:10.6p1-1 |
None known |
opensshSUSE:Linux Enterprise Server 12-LTSS |
before 6.6p1-54.26.1 | 6.6p1-54.26.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server 12-LTSS |
before 6.6p1-54.26.1 | 6.6p1-54.26.1 |
opensshSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 6.6p1-54.26.1 | 6.6p1-54.26.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 6.6p1-54.26.1 | 6.6p1-54.26.1 |
opensshSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 6.6p1-54.26.1 | 6.6p1-54.26.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 6.6p1-54.26.1 | 6.6p1-54.26.1 |
opensshSUSE:Linux Enterprise Module for Basesystem 15 |
before 7.6p1-9.13.1 | 7.6p1-9.13.1 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssh-askpass-gnomeSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 7.6p1-9.13.1 | 7.6p1-9.13.1 |
opensshSUSE:Linux Enterprise Module for Server Applications 15 |
before 7.6p1-9.13.1 | 7.6p1-9.13.1 |
opensshSUSE:OpenStack Cloud 7 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:OpenStack Cloud 7 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Desktop 12 SP3 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Desktop 12 SP3 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Desktop 12 SP4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Desktop 12 SP4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server 12 SP2-BCL |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server 12 SP2-BCL |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server 12 SP3 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server 12 SP3 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server 12 SP4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server 12 SP4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Enterprise Storage 4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
openssh-askpass-gnomeSUSE:Enterprise Storage 4 |
before 7.2p2-74.35.1 | 7.2p2-74.35.1 |
opensshSUSE:Linux Enterprise Server 11 SP4 |
before 6.6p1-36.12.1 | 6.6p1-36.12.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server 11 SP4 |
before 6.6p1-36.12.1 | 6.6p1-36.12.1 |
opensshSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 6.6p1-36.12.1 | 6.6p1-36.12.1 |
openssh-askpass-gnomeSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 6.6p1-36.12.1 | 6.6p1-36.12.1 |
opensshUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-1 Show 22 moreShow less1:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-11:6.6p1-21:6.6p1-2ubuntu11:6.6p1-2ubuntu21:6.6p1-2ubuntu2.21:6.6p1-2ubuntu2.31:6.6p1-2ubuntu2.41:6.6p1-2ubuntu2.61:6.6p1-2ubuntu2.71:6.6p1-2ubuntu2.81:6.6p1-2ubuntu2.101:6.6p1-2ubuntu2.111:6.6p1-2ubuntu2.121:6.6p1-2ubuntu2.131:6.6p1-2ubuntu2.13+esm11:6.6p1-2ubuntu2.13+esm21:6.6p1-2ubuntu2.13+esm31:6.6p1-2ubuntu2.13+esm4 |
None known |
opensshUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-4 Show 27 moreShow less1:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-11:7.2p2-21:7.2p2-31:7.2p2-41:7.2p2-4ubuntu11:7.2p2-4ubuntu2.11:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.41:7.2p2-4ubuntu2.51:7.2p2-4ubuntu2.61:7.2p2-4ubuntu2.71:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm11:7.2p2-4ubuntu2.10+esm21:7.2p2-4ubuntu2.10+esm31:7.2p2-4ubuntu2.10+esm41:7.2p2-4ubuntu2.10+esm51:7.2p2-4ubuntu2.10+esm61:7.2p2-4ubuntu2.10+esm71:7.2p2-4ubuntu2.10+esm81:7.2p2-4ubuntu2.10+esm91:7.2p2-4ubuntu2.10+esm10 |
None known |
opensshUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.3 Show 9 moreShow less1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm21:7.6p1-4ubuntu0.7+esm31:7.6p1-4ubuntu0.7+esm41:7.6p1-4ubuntu0.7+esm51:7.6p1-4ubuntu0.7+esm6 |
None known |
openssh-ssh1Ubuntu:18.04:LTS |
All versions, plus listed versions 1:7.5p1-81:7.5p1-91:7.5p1-9build11:7.5p1-10 |
None known |
opensshUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.1 Show 14 moreShow less1:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.51:8.2p1-4ubuntu0.71:8.2p1-4ubuntu0.81:8.2p1-4ubuntu0.91:8.2p1-4ubuntu0.101:8.2p1-4ubuntu0.111:8.2p1-4ubuntu0.121:8.2p1-4ubuntu0.131:8.2p1-4ubuntu0.13+esm11:8.2p1-4ubuntu0.13+esm21:8.2p1-4ubuntu0.13+esm3 |
None known |
openssh-ssh1Ubuntu:20.04:LTS |
All versions, plus listed versions 1:7.5p1-11build1 |
None known |
opensshopenSUSE:Leap 15.0 |
before 7.6p1-lp150.8.9.1 | 7.6p1-lp150.8.9.1 |
opensshopenSUSE:Tumbleweed |
before 8.4p1-7.4 | 8.4p1-7.4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SCP Client - Multiple Vulnerabilities (SSHtranger Things) | 2019-01-18 |
| Exploit-DB | OpenSSH SCP Client - Write Arbitrary Files | 2019-01-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-6110 is a medium vulnerability (CVSS 6.8) in Openbsd Openssh, published January 18, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 24.9%, the 97th percentile. Fixed in openssh 6.6p1-54.26.1.
References
security.netapp.com/advisory/ntap-20190213-0001
cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
exploit-db.com/exploits/46193
security.gentoo.org/glsa/201903-16
Show 31 moreShow less
cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
nvd.nist.gov/vuln/detail/CVE-2019-6110
github.com/advisories/GHSA-mv2j-4mm8-9xgv
security-tracker.debian.org/tracker/CVE-2019-6110
suse.com/support/update/announcement/2019/suse-su-20190125-1
bugzilla.suse.com/1121571
ubuntu.com/security/CVE-2019-6110
lists.mindrot.org/pipermail/openssh-unix-dev/2019-January/037459.html
cve.org/CVERecord?id=CVE-2019-6110
lists.opensuse.org/archives/list/[email protected]/thread/2MNLMLCJQ4RNIHX2VZUWA6ZK3G7XMXKU
This page doesn't list everything
Left out here: 28 versions. The JSON record has them.