USN-6279-1
openssh update
It was discovered that OpenSSH has an observable discrepancy leading to an information leak in the algorithm negotiation. This update mitigates the issue by tweaking the client hostkey preference ordering algorithm to prefer the default ordering if the user has a key that matches the best-preference default algorithm.
What each source reports
OSV No score
openssh update
It was discovered that OpenSSH has an observable discrepancy leading to an information leak in the algorithm negotiation. This update mitigates the issue by tweaking the client hostkey preference ordering algorithm to prefer the default ordering if the user has a key that matches the best-preference default algorithm.
- Record
USN-6279-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensshUbuntu:Pro:14.04:LTS |
before 1:6.6p1-2ubuntu2.13+esm2, plus listed versions 1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-1 Show 19 moreShow less1:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-11:6.6p1-21:6.6p1-2ubuntu11:6.6p1-2ubuntu21:6.6p1-2ubuntu2.21:6.6p1-2ubuntu2.31:6.6p1-2ubuntu2.41:6.6p1-2ubuntu2.61:6.6p1-2ubuntu2.71:6.6p1-2ubuntu2.81:6.6p1-2ubuntu2.101:6.6p1-2ubuntu2.111:6.6p1-2ubuntu2.121:6.6p1-2ubuntu2.131:6.6p1-2ubuntu2.13+esm1 |
1:6.6p1-2ubuntu2.13+esm2 |
opensshUbuntu:Pro:16.04:LTS |
before 1:7.2p2-4ubuntu2.10+esm4, plus listed versions 1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-4 Show 20 moreShow less1:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-11:7.2p2-21:7.2p2-31:7.2p2-41:7.2p2-4ubuntu11:7.2p2-4ubuntu2.11:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.41:7.2p2-4ubuntu2.51:7.2p2-4ubuntu2.61:7.2p2-4ubuntu2.71:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm11:7.2p2-4ubuntu2.10+esm21:7.2p2-4ubuntu2.10+esm3 |
1:7.2p2-4ubuntu2.10+esm4 |
opensshUbuntu:Pro:18.04:LTS |
before 1:7.6p1-4ubuntu0.7+esm2, plus listed versions 1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.3 Show 4 moreShow less1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm1 |
1:7.6p1-4ubuntu0.7+esm2 |
opensshUbuntu:20.04:LTS |
before 1:8.2p1-4ubuntu0.9, plus listed versions 1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.1 Show 6 moreShow less1:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.51:8.2p1-4ubuntu0.71:8.2p1-4ubuntu0.8 |
1:8.2p1-4ubuntu0.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6279-1 is a vulnerability with no CVSS score yet in openssh, published August 9, 2023. No source lists public exploit code. Fixed in openssh 1:6.6p1-2ubuntu2.13+esm2.