Every CVE Search/ Get API key

CVE-2026-35414

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios...

4.2 MediumPublic exploitFix available

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.22%Up 0.2 points since Apr 3, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.2

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
CVE-2026-35414
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-670
Updated
2026-11-02
EUVDEUVD-2026-18480 4.2

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
EUVD-2026-18480
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-f6c7-fj8h-5898 4.2

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios...

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
GHSA-f6c7-fj8h-5898
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-670
Updated
2026-11-02
NVD 4.2

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
CVE-2026-35414
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-670
Updated
2026-11-02
OSVBELL-CVE-2026-35414 8.1
Record
BELL-CVE-2026-35414
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 4.2

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
CVE-2026-35414
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-670
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-35414 8.1

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
DEBIAN-CVE-2026-35414
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVJLSEC-2026-78 8.1

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
JLSEC-2026-78
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1963 8.1

openssh security update

An open source implementation of SSH protocol version 2

Security Fix(es):

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.(CVE-2026-3497)

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).(CVE-2026-35385)

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.(CVE-2026-35386)

OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.(CVE-2026-35387)

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.(CVE-2026-35388)

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.(CVE-2026-35414)

Record
OESA-2026-1963
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:12389 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:12389
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:13380 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:13380
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:13381 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:13381
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:13383 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:13383
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:16059 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:16059
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19069 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:19069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19219 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:19219
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21298 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:21298
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21398 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:21398
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22329 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:22329
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22564 7.5

Red Hat Security Advisory: openssh update

Record
RHSA-2026:22564
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22648 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:22648
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:13380 7.5

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)

  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)

  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)

  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)

  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:13380
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:13381 7.5

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)

  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)

  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)

  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)

  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:13381
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:13383 7.5

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)

  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)

  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)

  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)

  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:13383
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:19069 7.5

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)

  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)

  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)

  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)

  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:19219 7.5

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)

  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)

  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)

  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)

  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19219
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-35414 8.1

CVE-2026-35414 in rootio-openssh - Patched by Root

Root has patched CVE-2026-35414 in the rootio-openssh package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-35414
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-35414 8.1

CVE-2026-35414 in rootio-openssh - Patched by Root

Root has patched CVE-2026-35414 in the rootio-openssh package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-35414
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-35414 4.2

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
UBUNTU-CVE-2026-35414
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:13380 No score

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:13380
Updated
2026-11-02
OSVALSA-2026:13381 No score

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:13381
Updated
2026-11-02
OSVALSA-2026:13383 No score

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:13383
Updated
2026-11-02
OSVALSA-2026:19069 No score

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19069
Updated
2026-11-02
OSVALSA-2026:19219 No score

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
  • OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option (CVE-2026-35414)
  • OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage (CVE-2026-35387)
  • OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions (CVE-2026-35388)
  • OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username (CVE-2026-35386)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19219
Updated
2026-11-02
OSVAZL-81788 No score

CVE-2026-35414 affecting package openssh for versions less than 9.8p1-8

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

Record
AZL-81788
Updated
2026-11-05
OSVCLSA-2026-1776428482 No score

openssh: Fix of 3 CVEs

  • CVE-2026-35387: correctly match ECDSA signature algorithms against HostKeyAlgorithms, PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms
  • CVE-2026-35388: add missing askpass check when using ControlMaster=ask/autoask and "ssh -O proxy ..."
  • CVE-2026-35414: fix authorized_keys principals option matching to compare comma-separated entries individually instead of using match_list
Record
CLSA-2026-1776428482
Updated
2026-11-02
OSVCLSA-2026-1776444688 No score

openssh: Fix of 3 CVEs

  • CVE-2026-35387: correctly match ECDSA signature algorithms against HostKeyAlgorithms, PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms
  • CVE-2026-35388: add missing askpass check when using ControlMaster=ask/autoask and "ssh -O proxy ..."
  • CVE-2026-35414: fix authorized_keys principals option matching to compare comma-separated entries individually instead of using match_list
Record
CLSA-2026-1776444688
Updated
2026-11-02
OSVCLSA-2026-1777296725 No score

Fix CVE(s): CVE-2026-35414

  • SECURITY UPDATE: mishandling of authorized_keys principals option
    • debian/patches/CVE-2026-35414.patch: replace match_list() with xstrdup + strsep + exact strcmp in match_principals_option() in auth2-pubkey.c, so certificate principals containing embedded commas are no longer wrongly cross-matched.
    • CVE-2026-35414
Record
CLSA-2026-1777296725
Updated
2026-11-02
OSVCLSA-2026-1777307655 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix incorrect matching of principals in the authorized_keys principals="..." option when a certificate principal contains a comma character
Record
CLSA-2026-1777307655
Updated
2026-11-02
OSVCLSA-2026-1777393442 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix incorrect matching of principals in the authorized_keys principals="..." option when a certificate principal contains a comma character
Record
CLSA-2026-1777393442
Updated
2026-11-02
OSVCLSA-2026-1777453408 No score

Fix CVE(s): CVE-2026-35414

  • SECURITY UPDATE: incorrect matching of principals in the authorized_keys principals="..." option when a certificate principal contains a comma.
    • debian/patches/CVE-2026-35414.patch: fix match_principals_option to split on comma and compare principals exactly
    • CVE-2026-35414
Record
CLSA-2026-1777453408
Updated
2026-11-02
OSVCLSA-2026-1777453856 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix incorrect matching of principals in the authorized_keys principals="..." option when a certificate principal contains a comma character
Record
CLSA-2026-1777453856
Updated
2026-11-02
OSVCLSA-2026-1777465438 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix incorrect matching of the authorized_keys principals="" option against certificate principals containing comma characters
Record
CLSA-2026-1777465438
Updated
2026-11-02
OSVCLSA-2026-1777466052 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix incorrect matching of the authorized_keys principals="" option against certificate principals containing comma characters
Record
CLSA-2026-1777466052
Updated
2026-11-02
OSVCLSA-2026-1777466402 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix incorrect matching of the authorized_keys principals="" option against certificate principals containing comma characters
Record
CLSA-2026-1777466402
Updated
2026-11-02
OSVCLSA-2026-1777591889 No score

Fix CVE(s): CVE-2026-35414

  • SECURITY UPDATE: incorrect matching of authorized_keys principals="..." option when a certificate principal name contains a comma character
    • debian/patches/CVE-2026-35414.patch: split principal_list on commas and exact-match each entry instead of passing it to match_list()
    • CVE-2026-35414
Record
CLSA-2026-1777591889
Updated
2026-11-02
OSVCLSA-2026-1777947165 No score

Fix CVE(s): CVE-2026-35414

  • SECURITY UPDATE: authorized_keys principals="" option mismatches certificate principals containing comma characters.
    • debian/patches/CVE-2026-35414.patch: rewrite match_principals_option to split principal_list with strsep() and compare with strcmp().
    • CVE-2026-35414
Record
CLSA-2026-1777947165
Updated
2026-11-02
OSVCLSA-2026-1777979444 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix authorized_keys principals option mishandling with comma-containing CA principals
Record
CLSA-2026-1777979444
Updated
2026-11-02
OSVCLSA-2026-1778056682 No score

openssh: Fix of CVE-2026-35414

  • CVE-2026-35414: fix authorized_keys principals option mishandling with comma-containing CA principals
Record
CLSA-2026-1778056682
Updated
2026-11-02
OSVMGASA-2026-0193 No score

Updated openssh packages fix security vulnerabilities

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode). (CVE-2026-35385) In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config. (CVE-2026-35386) OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms. (CVE-2026-35387) OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. (CVE-2026-35388) OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters. (CVE-2026-35414)

Record
MGASA-2026-0193
Updated
2026-11-02
OSVopenSUSE-SU-2026:10804-1 No score

openssh-10.3p1-4.1 on GA media

These are all security issues fixed in the openssh-10.3p1-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10804-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20757-1 No score

Security update for openssh

This update for openssh fixes the following issues

Security issues fixed:

  • CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427).
  • CVE-2026-35414: mishandling of authorized_keys principals option (bsc#1261430).

Other issues fixed:

  • SSH port not reachable on SLES-16.0-CHOST-BYOS since build 1.32 for both x86_64 and aarch64 (bsc#1262555).
  • OpenSSH audit support causes connection lost with parallel sessions (bsc#1252890).
Record
openSUSE-SU-2026:20757-1
Updated
2026-11-02
OSVSUSE-SU-2026:1876-1 No score

Security update for openssh

This update for openssh fixes the following issues

  • CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427).
  • CVE-2026-35414: mishandling of authorized_keys principals option (bsc#1261430).
Record
SUSE-SU-2026:1876-1
Updated
2026-11-02
OSVSUSE-SU-2026:2024-1 No score

Security update for openssh

This update for openssh fixes the following issues

Record
SUSE-SU-2026:2024-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssh
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-14.el10_1.alma.1
9.9p1-14.el10_1.alma.1
openssh-askpass
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-14.el10_1.alma.1
9.9p1-14.el10_1.alma.1
openssh-clients
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-14.el10_1.alma.1
9.9p1-14.el10_1.alma.1
openssh-keycat
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-14.el10_1.alma.1
9.9p1-14.el10_1.alma.1
openssh-keysign
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-14.el10_1.alma.1
9.9p1-14.el10_1.alma.1
openssh-server
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-14.el10_1.alma.1
9.9p1-14.el10_1.alma.1
openssh
AlmaLinux:9
From an advisory covering 5 CVEs
 before 8.7p1-49.el9_7.alma.1
8.7p1-49.el9_7.alma.1
openssh-askpass
AlmaLinux:9
From an advisory covering 5 CVEs
 before 8.7p1-49.el9_7.alma.1
8.7p1-49.el9_7.alma.1
openssh-clients
AlmaLinux:9
From an advisory covering 5 CVEs
 before 8.7p1-49.el9_7.alma.1
8.7p1-49.el9_7.alma.1
openssh-keycat
AlmaLinux:9
From an advisory covering 5 CVEs
 before 8.7p1-49.el9_7.alma.1
8.7p1-49.el9_7.alma.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
openssh-server
AlmaLinux:9
From an advisory covering 5 CVEs
 before 8.7p1-49.el9_7.alma.1
8.7p1-49.el9_7.alma.1
pam_ssh_agent_auth
AlmaLinux:9
From an advisory covering 5 CVEs
 before 0.10.4-5.49.el9_7.alma.1
0.10.4-5.49.el9_7.alma.1
openssh
AlmaLinux:8
From an advisory covering 5 CVEs
 before 8.0p1-29.el8_10
8.0p1-29.el8_10
openssh-askpass
AlmaLinux:8
From an advisory covering 5 CVEs
 before 8.0p1-29.el8_10
8.0p1-29.el8_10
openssh-cavs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 8.0p1-29.el8_10
8.0p1-29.el8_10
openssh-clients
AlmaLinux:8
From an advisory covering 5 CVEs
 before 8.0p1-29.el8_10
8.0p1-29.el8_10
openssh-keycat
AlmaLinux:8
From an advisory covering 5 CVEs
 before 8.0p1-29.el8_10
8.0p1-29.el8_10
openssh-ldap
AlmaLinux:8
From an advisory covering 5 CVEs
 before 8.0p1-29.el8_10
8.0p1-29.el8_10
openssh-server
AlmaLinux:8
From an advisory covering 5 CVEs
 before 8.0p1-29.el8_10
8.0p1-29.el8_10
pam_ssh_agent_auth
AlmaLinux:8
From an advisory covering 5 CVEs
 before 0.10.3-7.29.el8_10
0.10.3-7.29.el8_10
openssh
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-23.el10_2.alma.1
9.9p1-23.el10_2.alma.1
openssh-askpass
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-23.el10_2.alma.1
9.9p1-23.el10_2.alma.1
openssh-clients
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-23.el10_2.alma.1
9.9p1-23.el10_2.alma.1
openssh-keycat
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-23.el10_2.alma.1
9.9p1-23.el10_2.alma.1
openssh-keysign
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-23.el10_2.alma.1
9.9p1-23.el10_2.alma.1
openssh-server
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-23.el10_2.alma.1
9.9p1-23.el10_2.alma.1
openssh
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-7.el9_8.alma.1
9.9p1-7.el9_8.alma.1
openssh-askpass
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-7.el9_8.alma.1
9.9p1-7.el9_8.alma.1
openssh-clients
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-7.el9_8.alma.1
9.9p1-7.el9_8.alma.1
openssh-keycat
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-7.el9_8.alma.1
9.9p1-7.el9_8.alma.1
openssh-server
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-7.el9_8.alma.1
9.9p1-7.el9_8.alma.1
pam_ssh_agent_auth
AlmaLinux:9
From an advisory covering 5 CVEs
 before 0.10.4-7.7.el9_8.alma.1
0.10.4-7.7.el9_8.alma.1
openssh
Azure Linux:3
 before 9.8p1-8
9.8p1-8
openssh
Alpaquita:23
 9.1_p1-r3 up to 9.1_p1-r15
9.1_p1-r15
openssh
Alpaquita:25
 10.0_p1-r7 up to 10.3_p1-r0
10.3_p1-r0
openssh
Alpaquita:stream
 9.3_p1-r7 up to 10.3_p1-r0
10.3_p1-r0
openssh
BellSoft Hardened Containers:23
 9.1_p1-r3 up to 9.1_p1-r15
9.1_p1-r15
openssh
BellSoft Hardened Containers:25
 10.0_p1-r7 up to 10.3_p1-r0
10.3_p1-r0
openssh
BellSoft Hardened Containers:stream
 9.3_p1-r7 up to 10.3_p1-r0
10.3_p1-r0
openssh
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 8.7p1-30.el9_2.tuxcare.els10
8.7p1-30.el9_2.tuxcare.els10
openssh-askpass
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 8.7p1-30.el9_2.tuxcare.els10
8.7p1-30.el9_2.tuxcare.els10
openssh-clients
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 8.7p1-30.el9_2.tuxcare.els10
8.7p1-30.el9_2.tuxcare.els10
openssh-keycat
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 8.7p1-30.el9_2.tuxcare.els10
8.7p1-30.el9_2.tuxcare.els10
openssh-server
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 8.7p1-30.el9_2.tuxcare.els10
8.7p1-30.el9_2.tuxcare.els10
openssh-sk-dummy
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 8.7p1-30.el9_2.tuxcare.els10
8.7p1-30.el9_2.tuxcare.els10
pam_ssh_agent_auth
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 0.10.4-5.30.el9_2.tuxcare.els10
0.10.4-5.30.el9_2.tuxcare.els10
openssh
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 8.7p1-45.el9.tuxcare.els3
8.7p1-45.el9.tuxcare.els3
openssh-askpass
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 8.7p1-45.el9.tuxcare.els3
8.7p1-45.el9.tuxcare.els3
openssh-clients
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 8.7p1-45.el9.tuxcare.els3
8.7p1-45.el9.tuxcare.els3
openssh-keycat
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 8.7p1-45.el9.tuxcare.els3
8.7p1-45.el9.tuxcare.els3
openssh-server
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 8.7p1-45.el9.tuxcare.els3
8.7p1-45.el9.tuxcare.els3
openssh-sk-dummy
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 8.7p1-45.el9.tuxcare.els3
8.7p1-45.el9.tuxcare.els3
pam_ssh_agent_auth
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
 before 0.10.4-5.45.el9.tuxcare.els3
0.10.4-5.45.el9.tuxcare.els3
openssh-client
TuxCare:Ubuntu:20.04
 before 1:8.2p1-4ubuntu0.13+tuxcare.els2
1:8.2p1-4ubuntu0.13+tuxcare.els2
openssh-server
TuxCare:Ubuntu:20.04
 before 1:8.2p1-4ubuntu0.13+tuxcare.els2
1:8.2p1-4ubuntu0.13+tuxcare.els2
openssh-sftp-server
TuxCare:Ubuntu:20.04
 before 1:8.2p1-4ubuntu0.13+tuxcare.els2
1:8.2p1-4ubuntu0.13+tuxcare.els2
openssh-tests
TuxCare:Ubuntu:20.04
 before 1:8.2p1-4ubuntu0.13+tuxcare.els2
1:8.2p1-4ubuntu0.13+tuxcare.els2
ssh
TuxCare:Ubuntu:20.04
 before 1:8.2p1-4ubuntu0.13+tuxcare.els2
1:8.2p1-4ubuntu0.13+tuxcare.els2
ssh-askpass-gnome
TuxCare:Ubuntu:20.04
 before 1:8.2p1-4ubuntu0.13+tuxcare.els2
1:8.2p1-4ubuntu0.13+tuxcare.els2
openssh
TuxCare:CentOS:8.4
 before 8.0p1-6.el8_4.2.tuxcare.els10
8.0p1-6.el8_4.2.tuxcare.els10
openssh-askpass
TuxCare:CentOS:8.4
 before 8.0p1-6.el8_4.2.tuxcare.els10
8.0p1-6.el8_4.2.tuxcare.els10
openssh-cavs
TuxCare:CentOS:8.4
 before 8.0p1-6.el8_4.2.tuxcare.els10
8.0p1-6.el8_4.2.tuxcare.els10
openssh-clients
TuxCare:CentOS:8.4
 before 8.0p1-6.el8_4.2.tuxcare.els10
8.0p1-6.el8_4.2.tuxcare.els10
openssh-keycat
TuxCare:CentOS:8.4
 before 8.0p1-6.el8_4.2.tuxcare.els10
8.0p1-6.el8_4.2.tuxcare.els10
openssh-ldap
TuxCare:CentOS:8.4
 before 8.0p1-6.el8_4.2.tuxcare.els10
8.0p1-6.el8_4.2.tuxcare.els10
openssh-server
TuxCare:CentOS:8.4
 before 8.0p1-6.el8_4.2.tuxcare.els10
8.0p1-6.el8_4.2.tuxcare.els10
pam_ssh_agent_auth
TuxCare:CentOS:8.4
 before 0.10.3-7.6.el8_4.1.tuxcare.els10
0.10.3-7.6.el8_4.1.tuxcare.els10
openssh
TuxCare:CentOS-Stream:8
 before 8.0p1-24.el8.tuxcare.els6
8.0p1-24.el8.tuxcare.els6
openssh-askpass
TuxCare:CentOS-Stream:8
 before 8.0p1-24.el8.tuxcare.els6
8.0p1-24.el8.tuxcare.els6
openssh-cavs
TuxCare:CentOS-Stream:8
 before 8.0p1-24.el8.tuxcare.els6
8.0p1-24.el8.tuxcare.els6
openssh-clients
TuxCare:CentOS-Stream:8
 before 8.0p1-24.el8.tuxcare.els6
8.0p1-24.el8.tuxcare.els6
openssh-keycat
TuxCare:CentOS-Stream:8
 before 8.0p1-24.el8.tuxcare.els6
8.0p1-24.el8.tuxcare.els6
openssh-ldap
TuxCare:CentOS-Stream:8
 before 8.0p1-24.el8.tuxcare.els6
8.0p1-24.el8.tuxcare.els6
openssh-server
TuxCare:CentOS-Stream:8
 before 8.0p1-24.el8.tuxcare.els6
8.0p1-24.el8.tuxcare.els6
pam_ssh_agent_auth
TuxCare:CentOS-Stream:8
 before 0.10.3-7.24.el8.tuxcare.els6
0.10.3-7.24.el8.tuxcare.els6
openssh-client
TuxCare:Ubuntu:18.04
 before 1:7.6p1-4ubuntu0.7+tuxcare.els8
1:7.6p1-4ubuntu0.7+tuxcare.els8
openssh-server
TuxCare:Ubuntu:18.04
 before 1:7.6p1-4ubuntu0.7+tuxcare.els8
1:7.6p1-4ubuntu0.7+tuxcare.els8
openssh-sftp-server
TuxCare:Ubuntu:18.04
 before 1:7.6p1-4ubuntu0.7+tuxcare.els8
1:7.6p1-4ubuntu0.7+tuxcare.els8
ssh
TuxCare:Ubuntu:18.04
 before 1:7.6p1-4ubuntu0.7+tuxcare.els8
1:7.6p1-4ubuntu0.7+tuxcare.els8
ssh-askpass-gnome
TuxCare:Ubuntu:18.04
 before 1:7.6p1-4ubuntu0.7+tuxcare.els8
1:7.6p1-4ubuntu0.7+tuxcare.els8
openssh
TuxCare:CentOS:8.5
 before 8.0p1-10.el8.tuxcare.els10
8.0p1-10.el8.tuxcare.els10
openssh-askpass
TuxCare:CentOS:8.5
 before 8.0p1-10.el8.tuxcare.els10
8.0p1-10.el8.tuxcare.els10
openssh-cavs
TuxCare:CentOS:8.5
 before 8.0p1-10.el8.tuxcare.els10
8.0p1-10.el8.tuxcare.els10
openssh-clients
TuxCare:CentOS:8.5
 before 8.0p1-10.el8.tuxcare.els10
8.0p1-10.el8.tuxcare.els10
openssh-keycat
TuxCare:CentOS:8.5
 before 8.0p1-10.el8.tuxcare.els10
8.0p1-10.el8.tuxcare.els10
openssh-ldap
TuxCare:CentOS:8.5
 before 8.0p1-10.el8.tuxcare.els10
8.0p1-10.el8.tuxcare.els10
openssh-server
TuxCare:CentOS:8.5
 before 8.0p1-10.el8.tuxcare.els10
8.0p1-10.el8.tuxcare.els10
pam_ssh_agent_auth
TuxCare:CentOS:8.5
 before 0.10.3-7.10.el8.tuxcare.els10
0.10.3-7.10.el8.tuxcare.els10
openssh
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-askpass
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-cavs
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-clients
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-keycat
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-ldap
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-server
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-server-sysvinit
TuxCare:OracleLinux:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
pam_ssh_agent_auth
TuxCare:OracleLinux:7
 before 0.10.3-2.23.0.3.el7_9.tuxcare.els4
0.10.3-2.23.0.3.el7_9.tuxcare.els4
openssh
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-askpass
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-cavs
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-clients
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-keycat
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-ldap
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-server
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-server-sysvinit
TuxCare:RHEL:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
pam_ssh_agent_auth
TuxCare:RHEL:7
 before 0.10.3-2.23.0.3.el7_9.tuxcare.els4
0.10.3-2.23.0.3.el7_9.tuxcare.els4
openssh
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-askpass
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-cavs
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-clients
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-keycat
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-ldap
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-server
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
openssh-server-sysvinit
TuxCare:CentOS:7
 before 7.4p1-23.0.3.el7_9.tuxcare.els4
7.4p1-23.0.3.el7_9.tuxcare.els4
pam_ssh_agent_auth
TuxCare:CentOS:7
 before 0.10.3-2.23.0.3.el7_9.tuxcare.els4
0.10.3-2.23.0.3.el7_9.tuxcare.els4
openssh-client
TuxCare:Ubuntu:16.04
 before 2:7.2p2-4ubuntu2.10+tuxcare.els9
2:7.2p2-4ubuntu2.10+tuxcare.els9
openssh-client-ssh1
TuxCare:Ubuntu:16.04
 before 2:7.2p2-4ubuntu2.10+tuxcare.els9
2:7.2p2-4ubuntu2.10+tuxcare.els9
openssh-server
TuxCare:Ubuntu:16.04
 before 2:7.2p2-4ubuntu2.10+tuxcare.els9
2:7.2p2-4ubuntu2.10+tuxcare.els9
openssh-sftp-server
TuxCare:Ubuntu:16.04
 before 2:7.2p2-4ubuntu2.10+tuxcare.els9
2:7.2p2-4ubuntu2.10+tuxcare.els9
ssh
TuxCare:Ubuntu:16.04
 before 2:7.2p2-4ubuntu2.10+tuxcare.els9
2:7.2p2-4ubuntu2.10+tuxcare.els9
ssh-askpass-gnome
TuxCare:Ubuntu:16.04
 before 2:7.2p2-4ubuntu2.10+tuxcare.els9
2:7.2p2-4ubuntu2.10+tuxcare.els9
ssh-krb5
TuxCare:Ubuntu:16.04
 before 2:7.2p2-4ubuntu2.10+tuxcare.els9
2:7.2p2-4ubuntu2.10+tuxcare.els9
openssh-client
TuxCare:Debian:10
 before 1:7.9p1-10+deb10u4+tuxcare.els4
1:7.9p1-10+deb10u4+tuxcare.els4
openssh-server
TuxCare:Debian:10
 before 1:7.9p1-10+deb10u4+tuxcare.els4
1:7.9p1-10+deb10u4+tuxcare.els4
openssh-sftp-server
TuxCare:Debian:10
 before 1:7.9p1-10+deb10u4+tuxcare.els4
1:7.9p1-10+deb10u4+tuxcare.els4
openssh-tests
TuxCare:Debian:10
 before 1:7.9p1-10+deb10u4+tuxcare.els4
1:7.9p1-10+deb10u4+tuxcare.els4
ssh
TuxCare:Debian:10
 before 1:7.9p1-10+deb10u4+tuxcare.els4
1:7.9p1-10+deb10u4+tuxcare.els4
ssh-askpass-gnome
TuxCare:Debian:10
 before 1:7.9p1-10+deb10u4+tuxcare.els4
1:7.9p1-10+deb10u4+tuxcare.els4
openssh
TuxCare:OracleLinux:6
 before 5.3p1-125.el6.tuxcare.els8
5.3p1-125.el6.tuxcare.els8
openssh-askpass
TuxCare:OracleLinux:6
 before 5.3p1-125.el6.tuxcare.els8
5.3p1-125.el6.tuxcare.els8
openssh
Debian:12
 before 1:9.2p1-2+deb12u10, plus listed versions
1:9.2p1-21:9.2p1-2+deb12u11:9.2p1-2+deb12u21:9.2p1-2+deb12u31:9.2p1-2+deb12u4
Show 5 moreShow less
1:9.2p1-2+deb12u51:9.2p1-2+deb12u61:9.2p1-2+deb12u71:9.2p1-2+deb12u81:9.2p1-2+deb12u9
1:9.2p1-2+deb12u10
openssh
Debian:13
 before 1:10.0p1-7+deb13u3, plus listed versions
1:10.0p1-71:10.0p1-7+deb13u11:10.0p1-7+deb13u2
1:10.0p1-7+deb13u3
openssh
Debian:14
 before 1:10.3p1-1, plus listed versions
1:10.0p1-71:10.0p1-81:10.1p1-11:10.1p1-21:10.2p1-1
Show 8 moreShow less
1:10.2p1-21:10.2p1-2~bpo13+11:10.2p1-31:10.2p1-41:10.2p1-51:10.2p1-61:10.2p1-6~bpo13+11:10.3p1-1~bpo13+1
1:10.3p1-1
OpenSSH_jll
Julia
 before 10.3.1+0
10.3.1+0
openssh
Mageia:9
From an advisory covering 5 CVEs
 before 9.3p1-2.7.mga9
9.3p1-2.7.mga9
openssh
openEuler:24.03-LTS-SP1
From an advisory covering 6 CVEs
 before 9.6p1-13.oe2403sp1
9.6p1-13.oe2403sp1
openssh
openEuler:24.03-LTS-SP2
From an advisory covering 6 CVEs
 before 9.6p1-13.oe2403sp2
9.6p1-13.oe2403sp2
openssh
openEuler:24.03-LTS-SP3
From an advisory covering 6 CVEs
 before 9.6p1-13.oe2403sp3
9.6p1-13.oe2403sp3
openssh
openEuler:20.03-LTS-SP4
From an advisory covering 6 CVEs
 before 8.2p1-35.oe2003sp4
8.2p1-35.oe2003sp4
openssh
openEuler:22.03-LTS-SP4
From an advisory covering 6 CVEs
 before 8.8p1-41.oe2203sp4
8.8p1-41.oe2203sp4
openssh
openEuler:24.03-LTS
From an advisory covering 6 CVEs
 before 9.3p2-11.oe2403
9.3p2-11.oe2403
openssh-askpass
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-clients-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-keycat-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-keysign
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-keysign-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-server-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-clients
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-keycat
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-server
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el10_0.3
0:9.9p1-7.el10_0.3
openssh-askpass
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-askpass-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-clients-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-debugsource
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-keycat-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-keysign
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-keysign-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-server-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-clients
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-keycat
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-server
Red Hat:enterprise_linux:10.1
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1
0:9.9p1-14.el10_1
openssh-askpass
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-askpass-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-clients-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-keycat-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
pam_ssh_agent_auth
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:0.10.4-5.49.el9_7
0:0.10.4-5.49.el9_7
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:0.10.4-5.49.el9_7
0:0.10.4-5.49.el9_7
openssh
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-askpass-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-clients
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-clients-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-keycat
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-keycat-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-server
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-server-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7
0:8.7p1-49.el9_7
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:0.10.4-5.49.el9_7
0:0.10.4-5.49.el9_7
openssh-askpass
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-askpass-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-cavs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-clients-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-keycat-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:0.10.3-7.29.el8_10
0:0.10.3-7.29.el8_10
openssh
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-askpass-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-cavs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-cavs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-clients
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-clients-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-keycat
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-keycat-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-ldap
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-ldap-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-server
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh-server-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
pam_ssh_agent_auth
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:0.10.3-7.29.el8_10
0:0.10.3-7.29.el8_10
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:0.10.3-7.29.el8_10
0:0.10.3-7.29.el8_10
openssh-askpass
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-clients-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-keycat-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-server-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-sk-dummy-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
pam_ssh_agent_auth
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:0.10.4-5.45.el9_6.3
0:0.10.4-5.45.el9_6.3
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 5 CVEs
 before 0:0.10.4-5.45.el9_6.3
0:0.10.4-5.45.el9_6.3
openssh
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-clients
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-clients-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-debugsource
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-keycat
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh-keycat-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 5 CVEs
 before 0:8.7p1-45.el9_6.3
0:8.7p1-45.el9_6.3
openssh
Rocky Linux:10
From an advisory covering 5 CVEs
 before 0:9.9p1-14.el10_1.rocky.0.1
0:9.9p1-14.el10_1.rocky.0.1
openssh
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:8.7p1-49.el9_7.rocky.0.1
0:8.7p1-49.el9_7.rocky.0.1
openssh
Rocky Linux:8
From an advisory covering 5 CVEs
 before 0:8.0p1-29.el8_10
0:8.0p1-29.el8_10
openssh
Rocky Linux:10
From an advisory covering 5 CVEs
 before 0:9.9p1-23.el10_2.rocky.0.1
0:9.9p1-23.el10_2.rocky.0.1
openssh
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:9.9p1-7.el9_8.rocky.0.1
0:9.9p1-7.el9_8.rocky.0.1
openssh
SUSE:Linux Micro 6.0
From an advisory covering 5 CVEs
 before 9.6p1-6.1
9.6p1-6.1
openssh
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 4 CVEs
 before 9.6p1-150600.6.42.1
9.6p1-150600.6.42.1
openssh-askpass-gnome
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 4 CVEs
 before 9.6p1-150600.6.42.1
9.6p1-150600.6.42.1
openssh
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 4 CVEs
 before 9.6p1-150600.6.42.1
9.6p1-150600.6.42.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 4 CVEs
 before 9.6p1-150600.6.42.1
9.6p1-150600.6.42.1
openssh
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 4 CVEs
 before 9.6p1-150600.6.42.1
9.6p1-150600.6.42.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 4 CVEs
 before 9.6p1-150600.6.42.1
9.6p1-150600.6.42.1
openssh
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 4 CVEs
 before 8.4p1-150300.3.65.1
8.4p1-150300.3.65.1
openssh
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 3 CVEs
 before 7.2p2-81.40.1
7.2p2-81.40.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 3 CVEs
 before 7.2p2-81.40.1
7.2p2-81.40.1
openssh
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 7.2p2-81.40.1
7.2p2-81.40.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 3 CVEs
 before 7.2p2-81.40.1
7.2p2-81.40.1
openssh8.4
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 4 CVEs
 before 8.4p1-8.24.1
8.4p1-8.24.1
openssh8.4
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 4 CVEs
 before 8.4p1-8.24.1
8.4p1-8.24.1
openssh
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 2 CVEs
 before 6.6p1-36.31.1
6.6p1-36.31.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
From an advisory covering 2 CVEs
 before 6.6p1-36.31.1
6.6p1-36.31.1
openssh
Ubuntu:Pro:14.04:LTS
 before 1:6.6p1-2ubuntu2.13+esm4, plus listed versions
1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-1
Show 21 moreShow less
1:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-11:6.6p1-21:6.6p1-2ubuntu11:6.6p1-2ubuntu21:6.6p1-2ubuntu2.21:6.6p1-2ubuntu2.31:6.6p1-2ubuntu2.41:6.6p1-2ubuntu2.61:6.6p1-2ubuntu2.71:6.6p1-2ubuntu2.81:6.6p1-2ubuntu2.101:6.6p1-2ubuntu2.111:6.6p1-2ubuntu2.121:6.6p1-2ubuntu2.131:6.6p1-2ubuntu2.13+esm11:6.6p1-2ubuntu2.13+esm21:6.6p1-2ubuntu2.13+esm3
1:6.6p1-2ubuntu2.13+esm4
openssh
Ubuntu:Pro:16.04:LTS
 before 1:7.2p2-4ubuntu2.10+esm9, plus listed versions
1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-4
Show 25 moreShow less
1:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-11:7.2p2-21:7.2p2-31:7.2p2-41:7.2p2-4ubuntu11:7.2p2-4ubuntu2.11:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.41:7.2p2-4ubuntu2.51:7.2p2-4ubuntu2.61:7.2p2-4ubuntu2.71:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm11:7.2p2-4ubuntu2.10+esm21:7.2p2-4ubuntu2.10+esm31:7.2p2-4ubuntu2.10+esm41:7.2p2-4ubuntu2.10+esm51:7.2p2-4ubuntu2.10+esm61:7.2p2-4ubuntu2.10+esm71:7.2p2-4ubuntu2.10+esm8
1:7.2p2-4ubuntu2.10+esm9
openssh
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
1:7.2p2-4ubuntu2.fips.2.2.31:7.2p2-4ubuntu2.fips.2.4.11:7.2p2-4ubuntu2.fips.2.4.21:7.2p2-4ubuntu2.fips.2.8.11:7.2p2-4ubuntu2.fips.2.10.1
Show 6 moreShow less
1:7.2p2-4ubuntu2.fips.2.10.21:7.2p2-4ubuntu2.fips.2.10.31:7.2p2-4ubuntu2.fips.2.10.41:7.2p2-4ubuntu2.fips.2.10.51:7.2p2-4ubuntu2.fips.2.10.61:7.2p2-4ubuntu2.fips.2.10.7
 None known
openssh
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
1:7.2p2-4ubuntu2.fips.2.21:7.2p2-4ubuntu2.fips.2.2.11:7.2p2-4ubuntu2.fips.2.10.1
 None known
openssh
Ubuntu:Pro:18.04:LTS
 before 1:7.6p1-4ubuntu0.7+esm6, plus listed versions
1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.3
Show 8 moreShow less
1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm21:7.6p1-4ubuntu0.7+esm31:7.6p1-4ubuntu0.7+esm41:7.6p1-4ubuntu0.7+esm5
1:7.6p1-4ubuntu0.7+esm6
openssh-ssh1
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:7.5p1-81:7.5p1-91:7.5p1-9build11:7.5p1-10
 None known
openssh
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.21:7.9p1-10~ubuntu18.04.fips.0.31:7.9p1-10~ubuntu18.04.fips.0.41:7.9p1-10~ubuntu18.04.fips.0.5
Show 5 moreShow less
1:7.9p1-10~ubuntu18.04.fips.0.61:7.9p1-10~ubuntu18.04.fips.0.71:7.9p1-10~ubuntu18.04.fips.0.81:7.9p1-10~ubuntu18.04.fips.0.91:7.9p1-10~ubuntu18.04.fips.0.10
 None known
openssh
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.2
 None known
openssh
Ubuntu:Pro:20.04:LTS
 before 1:8.2p1-4ubuntu0.13+esm3, plus listed versions
1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.1
Show 13 moreShow less
1:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.51:8.2p1-4ubuntu0.71:8.2p1-4ubuntu0.81:8.2p1-4ubuntu0.91:8.2p1-4ubuntu0.101:8.2p1-4ubuntu0.111:8.2p1-4ubuntu0.121:8.2p1-4ubuntu0.131:8.2p1-4ubuntu0.13+esm11:8.2p1-4ubuntu0.13+esm2
1:8.2p1-4ubuntu0.13+esm3
openssh-ssh1
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:7.5p1-11build1
 None known
openssh
Ubuntu:Pro:FIPS-updates:20.04:LTS
 All versions, plus listed versions
1:8.2p1-4ubuntu0.fips.0.2.11:8.2p1-4ubuntu0.fips.0.4.01:8.2p1-4ubuntu0.fips.0.5.01:8.2p1-4ubuntu0.fips.0.71:8.2p1-4ubuntu0.fips.0.8
Show 7 moreShow less
1:8.2p1-4ubuntu0.fips.0.91:8.2p1-4ubuntu0.fips.0.101:8.2p1-4ubuntu0.fips.0.111:8.2p1-4ubuntu0.fips.0.121:8.2p1-4ubuntu0.fips.0.131:8.2p1-4ubuntu0.fips.0.13.11:8.2p1-4ubuntu0.fips.0.13.3
 None known
openssh
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
1:8.2p1-4ubuntu0.fips.0.2.1
 None known
openssh
Ubuntu:22.04:LTS
 before 1:8.9p1-3ubuntu0.15, plus listed versions
1:8.4p1-6ubuntu21:8.7p1-21:8.7p1-2build11:8.7p1-41:8.8p1-1
Show 11 moreShow less
1:8.9p1-31:8.9p1-3ubuntu0.11:8.9p1-3ubuntu0.31:8.9p1-3ubuntu0.41:8.9p1-3ubuntu0.51:8.9p1-3ubuntu0.61:8.9p1-3ubuntu0.71:8.9p1-3ubuntu0.101:8.9p1-3ubuntu0.111:8.9p1-3ubuntu0.131:8.9p1-3ubuntu0.14
1:8.9p1-3ubuntu0.15
openssh-ssh1
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:7.5p1-121:7.5p1-12build11:7.5p1-13
 None known
openssh
Ubuntu:Pro:FIPS-preview:22.04:LTS
 All versions, plus listed versions
1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu1.fips.0~ppa3
 None known
openssh
Ubuntu:Pro:FIPS-updates:22.04:LTS
 All versions, plus listed versions
1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu0.6+Fips11:8.9p1-3ubuntu0.7+Fips11:8.9p1-3ubuntu0.10+Fips1
Show 8 moreShow less
1:8.9p1-3ubuntu0.11+Fips11:8.9p1-3ubuntu0.13+Fips11:8.9p1-3ubuntu0.14+Fips11:8.9p1-3ubuntu0.15+Fips11:8.9p1-3ubuntu0.15+Fips31:8.9p1-3ubuntu0.16+Fips31:8.9p1-3ubuntu0.18+Fips11:8.9p1-3ubuntu1.fips.0~ppa3
 None known
openssh
Ubuntu:24.04:LTS
 before 1:9.6p1-3ubuntu13.16, plus listed versions
1:9.3p1-1ubuntu31:9.4p1-1ubuntu11:9.6p1-3ubuntu11:9.6p1-3ubuntu21:9.6p1-3ubuntu11
Show 13 moreShow less
1:9.6p1-3ubuntu121:9.6p1-3ubuntu131:9.6p1-3ubuntu13.31:9.6p1-3ubuntu13.41:9.6p1-3ubuntu13.51:9.6p1-3ubuntu13.71:9.6p1-3ubuntu13.81:9.6p1-3ubuntu13.91:9.6p1-3ubuntu13.111:9.6p1-3ubuntu13.121:9.6p1-3ubuntu13.131:9.6p1-3ubuntu13.141:9.6p1-3ubuntu13.15
1:9.6p1-3ubuntu13.16
openssh-ssh1
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:7.5p1-141:7.5p1-151:7.5p1-15build11:7.5p1-16
 None known
openssh
Ubuntu:Pro:FIPS-updates:24.04:LTS
 All versions, plus listed versions
1:9.6p1-3ubuntu13.7+Fips11:9.6p1-3ubuntu13.12+Fips11:9.6p1-3ubuntu13.13+Fips11:9.6p1-3ubuntu13.14+Fips11:9.6p1-3ubuntu13.15+Fips1
Show 5 moreShow less
1:9.6p1-3ubuntu13.16+Fips11:9.6p1-3ubuntu13.16+Fips21:9.6p1-3ubuntu13.18+Fips11:9.6p1-3ubuntu13.19+Fips11:9.6p1-3ubuntu13.20+Fips1
 None known
openssh
Ubuntu:25.10
 before 1:10.0p1-5ubuntu5.4, plus listed versions
1:9.9p1-3ubuntu31:9.9p1-3ubuntu3.11:10.0p1-5ubuntu21:10.0p1-5ubuntu31:10.0p1-5ubuntu41:10.0p1-5ubuntu51:10.0p1-5ubuntu5.1
1:10.0p1-5ubuntu5.4
openssh-ssh1
Ubuntu:25.10
 All versions, plus listed versions
1:7.5p1-17
 None known
openssh-ssh1
Ubuntu:26.10
 All versions, plus listed versions
1:7.5p1-181:7.5p1-18ubuntu11:7.5p1-18ubuntu2
 None known
openssh
Ubuntu:26.04:LTS
 before 1:10.2p1-2ubuntu3.2, plus listed versions
1:10.0p1-5ubuntu51:10.2p1-2ubuntu11:10.2p1-2ubuntu3
1:10.2p1-2ubuntu3.2
openssh-ssh1
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:7.5p1-171:7.5p1-18
 None known
openssh
Ubuntu:Pro:14.04:LTS
From an advisory covering 10 CVEs
 before 1:6.6p1-2ubuntu2.13+esm4, plus listed versions
1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-1
Show 21 moreShow less
1:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-11:6.6p1-21:6.6p1-2ubuntu11:6.6p1-2ubuntu21:6.6p1-2ubuntu2.21:6.6p1-2ubuntu2.31:6.6p1-2ubuntu2.41:6.6p1-2ubuntu2.61:6.6p1-2ubuntu2.71:6.6p1-2ubuntu2.81:6.6p1-2ubuntu2.101:6.6p1-2ubuntu2.111:6.6p1-2ubuntu2.121:6.6p1-2ubuntu2.131:6.6p1-2ubuntu2.13+esm11:6.6p1-2ubuntu2.13+esm21:6.6p1-2ubuntu2.13+esm3
1:6.6p1-2ubuntu2.13+esm4
openssh
Ubuntu:Pro:16.04:LTS
From an advisory covering 10 CVEs
 before 1:7.2p2-4ubuntu2.10+esm10, plus listed versions
1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-4
Show 26 moreShow less
1:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-11:7.2p2-21:7.2p2-31:7.2p2-41:7.2p2-4ubuntu11:7.2p2-4ubuntu2.11:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.41:7.2p2-4ubuntu2.51:7.2p2-4ubuntu2.61:7.2p2-4ubuntu2.71:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm11:7.2p2-4ubuntu2.10+esm21:7.2p2-4ubuntu2.10+esm31:7.2p2-4ubuntu2.10+esm41:7.2p2-4ubuntu2.10+esm51:7.2p2-4ubuntu2.10+esm61:7.2p2-4ubuntu2.10+esm71:7.2p2-4ubuntu2.10+esm81:7.2p2-4ubuntu2.10+esm9
1:7.2p2-4ubuntu2.10+esm10
openssh
Ubuntu:Pro:18.04:LTS
From an advisory covering 10 CVEs
 before 1:7.6p1-4ubuntu0.7+esm6, plus listed versions
1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.3
Show 8 moreShow less
1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm21:7.6p1-4ubuntu0.7+esm31:7.6p1-4ubuntu0.7+esm41:7.6p1-4ubuntu0.7+esm5
1:7.6p1-4ubuntu0.7+esm6
openssh
Ubuntu:Pro:20.04:LTS
From an advisory covering 10 CVEs
 before 1:8.2p1-4ubuntu0.13+esm3, plus listed versions
1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.1
Show 13 moreShow less
1:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.51:8.2p1-4ubuntu0.71:8.2p1-4ubuntu0.81:8.2p1-4ubuntu0.91:8.2p1-4ubuntu0.101:8.2p1-4ubuntu0.111:8.2p1-4ubuntu0.121:8.2p1-4ubuntu0.131:8.2p1-4ubuntu0.13+esm11:8.2p1-4ubuntu0.13+esm2
1:8.2p1-4ubuntu0.13+esm3
openssh
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 10.3p1-4.1
10.3p1-4.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubkillercd/CVE-2026-354142026-04-29

History

History
RecordedChangedSources
affected
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-35414 is a medium vulnerability (CVSS 4.2) in Openbsd Openssh, published April 2, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in openssh 9.8p1-8.

References

Show 128 moreShow less
This page doesn't list everything

Left out here: 176 package rows. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 14 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open