{"id":"CVE-2023-51385","aliases":["ALPINE-CVE-2023-51385","ALSA-2024:0606","ALSA-2024:1130","AZL-32203","AZL-35082","BELL-CVE-2023-51385","CLSA-2023-1703610859","CLSA-2023-1703611900","CLSA-2023-1703612125","CLSA-2023-1703612727","CLSA-2023-1703612912","CLSA-2023-1703784959","CLSA-2023-1703785060","CLSA-2023-1703785140","DEBIAN-CVE-2023-51385","DLA-3694-1","DSA-5586-1","EUVD-2023-56106","GHSA-5mq4-x9g5-4vc4","JLSEC-2026-70","MGASA-2024-0010","OESA-2023-1975","OESA-2023-1976","OESA-2023-1977","OESA-2023-1978","OESA-2023-1979","OESA-2023-1980","RHSA-2024:0429","RHSA-2024:0455","RHSA-2024:0594","RHSA-2024:0606","RHSA-2024:1130","RHSA-2026:1790","RHSA-2026:22329","RLSA-2024:0606","ROOT-OS-ALPINE-318-CVE-2023-51385","SUSE-SU-2024:0596-1","SUSE-SU-2024:0603-1","SUSE-SU-2024:0604-1","SUSE-SU-2024:2393-1","SUSE-SU-2025:20009-1","UBUNTU-CVE-2023-51385","USN-6560-2","USN-6560-3","USN-6565-1","openSUSE-SU-2024:14113-1"],"status":"published","title":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.19753,"percentile":0.97424,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-78"],"published":"2023-12-18T00:00:00Z","modified":"2026-11-06T12:15:02Z","exploits":[{"source":"pocgithub","id":"vin01/poc-proxycommand-vulnerable","title":"vin01/poc-proxycommand-vulnerable","date":"2023-09-28","url":"https://github.com/vin01/poc-proxycommand-vulnerable"},{"source":"pocgithub","id":"FeatherStark/CVE-2023-51385","title":"FeatherStark/CVE-2023-51385","date":"2023-12-25","url":"https://github.com/FeatherStark/CVE-2023-51385"},{"source":"pocgithub","id":"Le1a/CVE-2023-51385","title":"Le1a/CVE-2023-51385","date":"2023-12-25","url":"https://github.com/Le1a/CVE-2023-51385"},{"source":"pocgithub","id":"LtmThink/CVE-2023-51385_test","title":"LtmThink/CVE-2023-51385_test","date":"2023-12-25","url":"https://github.com/LtmThink/CVE-2023-51385_test"},{"source":"pocgithub","id":"watarium/poc-cve-2023-51385","title":"watarium/poc-cve-2023-51385","date":"2023-12-25","url":"https://github.com/watarium/poc-cve-2023-51385"},{"source":"pocgithub","id":"WLaoDuo/CVE-2023-51385_poc-test","title":"WLaoDuo/CVE-2023-51385_poc-test","date":"2023-12-26","url":"https://github.com/WLaoDuo/CVE-2023-51385_poc-test"},{"source":"pocgithub","id":"power1314520/CVE-2023-51385_test","title":"power1314520/CVE-2023-51385_test","date":"2023-12-30","url":"https://github.com/power1314520/CVE-2023-51385_test"},{"source":"pocgithub","id":"WOOOOONG/CVE-2023-51385","title":"WOOOOONG/CVE-2023-51385","date":"2024-01-02","url":"https://github.com/WOOOOONG/CVE-2023-51385"},{"source":"pocgithub","id":"julienbrs/exploit-CVE-2023-51385","title":"julienbrs/exploit-CVE-2023-51385","date":"2024-01-03","url":"https://github.com/julienbrs/exploit-CVE-2023-51385"},{"source":"pocgithub","id":"julienbrs/malicious-exploit-CVE-2023-51385","title":"julienbrs/malicious-exploit-CVE-2023-51385","date":"2024-01-03","url":"https://github.com/julienbrs/malicious-exploit-CVE-2023-51385"},{"source":"pocgithub","id":"Sonicrrrr/CVE-2023-51385","title":"Sonicrrrr/CVE-2023-51385","date":"2024-01-09","url":"https://github.com/Sonicrrrr/CVE-2023-51385"},{"source":"pocgithub","id":"farliy-hacker/CVE-2023-51385","title":"farliy-hacker/CVE-2023-51385","date":"2024-01-20","url":"https://github.com/farliy-hacker/CVE-2023-51385"},{"source":"pocgithub","id":"farliy-hacker/CVE-2023-51385-save","title":"farliy-hacker/CVE-2023-51385-save","date":"2024-01-20","url":"https://github.com/farliy-hacker/CVE-2023-51385-save"},{"source":"pocgithub","id":"2048JiaLi/CVE-2023-51385","title":"2048JiaLi/CVE-2023-51385","date":"2024-01-30","url":"https://github.com/2048JiaLi/CVE-2023-51385"},{"source":"pocgithub","id":"thinkliving2020/CVE-2023-51385-","title":"thinkliving2020/CVE-2023-51385-","date":"2024-04-16","url":"https://github.com/thinkliving2020/CVE-2023-51385-"},{"source":"pocgithub","id":"c0deur/CVE-2023-51385","title":"c0deur/CVE-2023-51385","date":"2024-05-27","url":"https://github.com/c0deur/CVE-2023-51385"},{"source":"pocgithub","id":"endasugrue/CVE-2023-51385_poc","title":"endasugrue/CVE-2023-51385_poc","date":"2024-06-12","url":"https://github.com/endasugrue/CVE-2023-51385_poc"},{"source":"pocgithub","id":"MiningBot-eth/CVE-2023-51385-exploit","title":"MiningBot-eth/CVE-2023-51385-exploit","date":"2024-06-15","url":"https://github.com/MiningBot-eth/CVE-2023-51385-exploit"},{"source":"pocgithub","id":"Featherw1t/CVE-2023-51385_test","title":"Featherw1t/CVE-2023-51385_test","date":"2024-08-20","url":"https://github.com/Featherw1t/CVE-2023-51385_test"},{"source":"pocgithub","id":"GroundCTL2MajorTom/CVE-2023-51385P-POC","title":"GroundCTL2MajorTom/CVE-2023-51385P-POC","date":"2025-01-06","url":"https://github.com/GroundCTL2MajorTom/CVE-2023-51385P-POC"},{"source":"pocgithub","id":"GroundCTL2MajorTom/CVE-2023-51385POC","title":"GroundCTL2MajorTom/CVE-2023-51385POC","date":"2025-01-06","url":"https://github.com/GroundCTL2MajorTom/CVE-2023-51385POC"},{"source":"pocgithub","id":"saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC","title":"saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC","date":"2025-07-22","url":"https://github.com/saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC"},{"source":"pocgithub","id":"LSP1025923/cve-2023-51385","title":"LSP1025923/cve-2023-51385","date":"2026-07-06","url":"https://github.com/LSP1025923/cve-2023-51385"}],"fixes":[{"ecosystem":"Alpine:v3.16","package":"openssh","fixed_in":["9.0_p1-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openssh","fixed_in":["9.1_p1-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openssh","fixed_in":["8.9p1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"openssh","fixed_in":["9.7p1-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openssh","fixed_in":["9.1_p1-r7"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openssh","fixed_in":["9.1_p1-r7"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openssh","fixed_in":["9.6_p1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-client","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-server","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-sftp-server","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh-askpass-gnome","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-client","fixed_in":["2:7.2p2-4ubuntu2.10+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-client-ssh1","fixed_in":["2:7.2p2-4ubuntu2.10+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-server","fixed_in":["2:7.2p2-4ubuntu2.10+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-sftp-server","fixed_in":["2:7.2p2-4ubuntu2.10+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ssh","fixed_in":["2:7.2p2-4ubuntu2.10+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ssh-askpass-gnome","fixed_in":["2:7.2p2-4ubuntu2.10+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ssh-krb5","fixed_in":["2:7.2p2-4ubuntu2.10+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-askpass","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-cavs","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-clients","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-keycat","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-ldap","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-server","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-7.6.el8_4.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh","fixed_in":["8.0p1-10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-askpass","fixed_in":["8.0p1-10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-cavs","fixed_in":["8.0p1-10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-clients","fixed_in":["8.0p1-10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-keycat","fixed_in":["8.0p1-10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-ldap","fixed_in":["8.0p1-10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-server","fixed_in":["8.0p1-10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-7.10.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh-askpass","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh-cavs","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh-clients","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh-keycat","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh-ldap","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh-server","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"openssh-server-sysvinit","fixed_in":["7.4p1-23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-2.23.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssh","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssh-askpass","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssh-clients","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssh-ldap","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openssh-server","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"pam_ssh_agent_auth","fixed_in":["0.9.3-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh","fixed_in":["8.7p1-30.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-askpass","fixed_in":["8.7p1-30.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-clients","fixed_in":["8.7p1-30.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-keycat","fixed_in":["8.7p1-30.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-server","fixed_in":["8.7p1-30.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-sk-dummy","fixed_in":["8.7p1-30.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam_ssh_agent_auth","fixed_in":["0.10.4-5.30.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssh","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssh-askpass","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssh-clients","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssh-ldap","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openssh-server","fixed_in":["5.3p1-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"pam_ssh_agent_auth","fixed_in":["0.9.3-125.el6.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssh","fixed_in":["1:9.2p1-2+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssh","fixed_in":["1:9.6p1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssh","fixed_in":["1:9.6p1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenSSH_jll","fixed_in":["9.9.1+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"openssh","fixed_in":["8.2p1-28.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"openssh","fixed_in":["8.2p1-28.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openssh","fixed_in":["8.2p1-28.oe1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"openssh","fixed_in":["9.3_p2-r20071","9.3_p2-r20073","9.3_p2-r20074","9.3_p2-r20072","9.3_p2-r30075","9.3_p2-r40076"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-openssh","fixed_in":["9.3_p2-r20071","9.3_p2-r20073","9.3_p2-r20074","9.3_p2-r20072","9.3_p2-r30075","9.3_p2-r40076"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"openssh","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openssh","fixed_in":["8.1p1-150200.5.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.1p1-150200.5.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssh","fixed_in":["8.1p1-150200.5.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.1p1-150200.5.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssh","fixed_in":["8.1p1-150200.5.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssh-askpass-gnome","fixed_in":["8.1p1-150200.5.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssh-testuser","fixed_in":["0-81.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssh","fixed_in":["7.2p2-81.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssh-askpass-gnome","fixed_in":["7.2p2-81.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssh","fixed_in":["7.2p2-81.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssh-askpass-gnome","fixed_in":["7.2p2-81.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssh","fixed_in":["1:7.2p2-4ubuntu2.10+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssh","fixed_in":["1:7.2p2-4ubuntu2.fips.2.10.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openssh","fixed_in":["1:7.6p1-4ubuntu0.7+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssh","fixed_in":["1:7.9p1-10~ubuntu18.04.fips.0.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openssh","fixed_in":["1:8.2p1-4ubuntu0.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssh","fixed_in":["1:8.2p1-4ubuntu0.fips.0.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openssh","fixed_in":["1:8.9p1-3ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openssh","fixed_in":["1:9.6p1-3ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0_p1-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1_p1-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-7.19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-5.34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9p1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7p1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1_p1-r3"},{"fixed":"9.1_p1-r7"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3_p1-r7"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1_p1-r3"},{"fixed":"9.1_p1-r7"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3_p1-r7"},{"fixed":"9.6_p1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-sftp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.2p2-4ubuntu2.10+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-client-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.2p2-4ubuntu2.10+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.2p2-4ubuntu2.10+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openssh-sftp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.2p2-4ubuntu2.10+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.2p2-4ubuntu2.10+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.2p2-4ubuntu2.10+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ssh-krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.2p2-4ubuntu2.10+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-7.6.el8_4.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-7.10.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"openssh-server-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-2.23.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-5.30.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3p1-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3-125.el6.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.2p1-2+deb12u2"}]}],"versions":["1:9.2p1-2","1:9.2p1-2+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10+deb10u4"}]}],"versions":["1:7.9p1-10","1:7.9p1-10+deb10u1","1:7.9p1-10+deb10u2","1:7.9p1-10+deb10u3"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.4p1-5+deb11u3"}]}],"versions":["1:8.4p1-5","1:8.4p1-5+deb11u1","1:8.4p1-5+deb11u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.2p1-2+deb12u2"}]}],"versions":["1:9.2p1-2","1:9.2p1-2+deb12u1"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"OpenSSH_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"9.9.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3p1-2.1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2p1-28.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2p1-28.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8p1-23.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8p1-25.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8p1-25.oe2203sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2p1-28.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.15.el8_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-5.30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-5.30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-5.30.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.19.el8_8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-5.34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-5.34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-5.34.el9_3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-4.13.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-4.13.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-13.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-4.13.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-7.el8_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-7.el8_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-7.el8_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-7.el8_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-7.el8_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-7.el8_4.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-19.el8_9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3_p2-r20071"},{"fixed":"9.3_p2-r20073"},{"fixed":"9.3_p2-r20074"},{"fixed":"9.3_p2-r20072"},{"fixed":"9.3_p2-r30075"},{"fixed":"9.3_p2-r40076"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3_p2-r20071"},{"fixed":"9.3_p2-r20073"},{"fixed":"9.3_p2-r20074"},{"fixed":"9.3_p2-r20072"},{"fixed":"9.3_p2-r30075"},{"fixed":"9.3_p2-r40076"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1p1-150200.5.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1p1-150200.5.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1p1-150200.5.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1p1-150200.5.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1p1-150200.5.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1p1-150200.5.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openssh-testuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0-81.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-81.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-81.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-81.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2p2-81.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-2.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6.2p2-6","1:6.2p2-6ubuntu1","1:6.4p1-1","1:6.4p1-2","1:6.5p1-1","1:6.5p1-2","1:6.5p1-3","1:6.5p1-4","1:6.5p1-6","1:6.6p1-1","1:6.6p1-2","1:6.6p1-2ubuntu1","1:6.6p1-2ubuntu2","1:6.6p1-2ubuntu2.2","1:6.6p1-2ubuntu2.3","1:6.6p1-2ubuntu2.4","1:6.6p1-2ubuntu2.6","1:6.6p1-2ubuntu2.7","1:6.6p1-2ubuntu2.8","1:6.6p1-2ubuntu2.10","1:6.6p1-2ubuntu2.11","1:6.6p1-2ubuntu2.12","1:6.6p1-2ubuntu2.13","1:6.6p1-2ubuntu2.13+esm1","1:6.6p1-2ubuntu2.13+esm2","1:6.6p1-2ubuntu2.13+esm3","1:6.6p1-2ubuntu2.13+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-4ubuntu2.10+esm6"}]}],"versions":["1:6.9p1-2","1:6.9p1-3","1:7.1p1-1","1:7.1p1-3","1:7.1p1-4","1:7.1p1-6","1:7.1p2-1","1:7.1p2-2","1:7.2p1-1","1:7.2p2-1","1:7.2p2-2","1:7.2p2-3","1:7.2p2-4","1:7.2p2-4ubuntu1","1:7.2p2-4ubuntu2.1","1:7.2p2-4ubuntu2.2","1:7.2p2-4ubuntu2.4","1:7.2p2-4ubuntu2.5","1:7.2p2-4ubuntu2.6","1:7.2p2-4ubuntu2.7","1:7.2p2-4ubuntu2.8","1:7.2p2-4ubuntu2.10","1:7.2p2-4ubuntu2.10+esm1","1:7.2p2-4ubuntu2.10+esm2","1:7.2p2-4ubuntu2.10+esm3","1:7.2p2-4ubuntu2.10+esm4","1:7.2p2-4ubuntu2.10+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-4ubuntu2.fips.2.10.6"}]}],"versions":["1:7.2p2-4ubuntu2.fips.2.2.3","1:7.2p2-4ubuntu2.fips.2.4.1","1:7.2p2-4ubuntu2.fips.2.4.2","1:7.2p2-4ubuntu2.fips.2.8.1","1:7.2p2-4ubuntu2.fips.2.10.1","1:7.2p2-4ubuntu2.fips.2.10.2","1:7.2p2-4ubuntu2.fips.2.10.3","1:7.2p2-4ubuntu2.fips.2.10.4","1:7.2p2-4ubuntu2.fips.2.10.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.2p2-4ubuntu2.fips.2.2","1:7.2p2-4ubuntu2.fips.2.2.1","1:7.2p2-4ubuntu2.fips.2.10.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+esm3"}]}],"versions":["1:7.5p1-10","1:7.6p1-4","1:7.6p1-4ubuntu0.1","1:7.6p1-4ubuntu0.2","1:7.6p1-4ubuntu0.3","1:7.6p1-4ubuntu0.5","1:7.6p1-4ubuntu0.6","1:7.6p1-4ubuntu0.7","1:7.6p1-4ubuntu0.7+esm1","1:7.6p1-4ubuntu0.7+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-8","1:7.5p1-9","1:7.5p1-9build1","1:7.5p1-10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10~ubuntu18.04.fips.0.9"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2","1:7.9p1-10~ubuntu18.04.fips.0.3","1:7.9p1-10~ubuntu18.04.fips.0.4","1:7.9p1-10~ubuntu18.04.fips.0.5","1:7.9p1-10~ubuntu18.04.fips.0.6","1:7.9p1-10~ubuntu18.04.fips.0.7","1:7.9p1-10~ubuntu18.04.fips.0.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.11"}]}],"versions":["1:8.0p1-6build1","1:8.1p1-1","1:8.1p1-5","1:8.2p1-4","1:8.2p1-4ubuntu0.1","1:8.2p1-4ubuntu0.2","1:8.2p1-4ubuntu0.3","1:8.2p1-4ubuntu0.4","1:8.2p1-4ubuntu0.5","1:8.2p1-4ubuntu0.7","1:8.2p1-4ubuntu0.8","1:8.2p1-4ubuntu0.9","1:8.2p1-4ubuntu0.10"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-11build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.fips.0.11"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1","1:8.2p1-4ubuntu0.fips.0.4.0","1:8.2p1-4ubuntu0.fips.0.5.0","1:8.2p1-4ubuntu0.fips.0.7","1:8.2p1-4ubuntu0.fips.0.8","1:8.2p1-4ubuntu0.fips.0.9","1:8.2p1-4ubuntu0.fips.0.10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.6"}]}],"versions":["1:8.4p1-6ubuntu2","1:8.7p1-2","1:8.7p1-2build1","1:8.7p1-4","1:8.8p1-1","1:8.9p1-3","1:8.9p1-3ubuntu0.1","1:8.9p1-3ubuntu0.3","1:8.9p1-3ubuntu0.4","1:8.9p1-3ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-12","1:7.5p1-12build1","1:7.5p1-13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu1"}]}],"versions":["1:9.3p1-1ubuntu3","1:9.4p1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-14","1:7.5p1-15","1:7.5p1-15build1","1:7.5p1-16"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-18","1:7.5p1-18ubuntu1","1:7.5p1-18ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17","1:7.5p1-18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-4ubuntu2.10+esm5"}]}],"versions":["1:6.9p1-2","1:6.9p1-3","1:7.1p1-1","1:7.1p1-3","1:7.1p1-4","1:7.1p1-6","1:7.1p2-1","1:7.1p2-2","1:7.2p1-1","1:7.2p2-1","1:7.2p2-2","1:7.2p2-3","1:7.2p2-4","1:7.2p2-4ubuntu1","1:7.2p2-4ubuntu2.1","1:7.2p2-4ubuntu2.2","1:7.2p2-4ubuntu2.4","1:7.2p2-4ubuntu2.5","1:7.2p2-4ubuntu2.6","1:7.2p2-4ubuntu2.7","1:7.2p2-4ubuntu2.8","1:7.2p2-4ubuntu2.10","1:7.2p2-4ubuntu2.10+esm1","1:7.2p2-4ubuntu2.10+esm2","1:7.2p2-4ubuntu2.10+esm3","1:7.2p2-4ubuntu2.10+esm4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+esm3"}]}],"versions":["1:7.5p1-10","1:7.6p1-4","1:7.6p1-4ubuntu0.1","1:7.6p1-4ubuntu0.2","1:7.6p1-4ubuntu0.3","1:7.6p1-4ubuntu0.5","1:7.6p1-4ubuntu0.6","1:7.6p1-4ubuntu0.7","1:7.6p1-4ubuntu0.7+esm1","1:7.6p1-4ubuntu0.7+esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-4ubuntu2.10+esm6"}]}],"versions":["1:6.9p1-2","1:6.9p1-3","1:7.1p1-1","1:7.1p1-3","1:7.1p1-4","1:7.1p1-6","1:7.1p2-1","1:7.1p2-2","1:7.2p1-1","1:7.2p2-1","1:7.2p2-2","1:7.2p2-3","1:7.2p2-4","1:7.2p2-4ubuntu1","1:7.2p2-4ubuntu2.1","1:7.2p2-4ubuntu2.2","1:7.2p2-4ubuntu2.4","1:7.2p2-4ubuntu2.5","1:7.2p2-4ubuntu2.6","1:7.2p2-4ubuntu2.7","1:7.2p2-4ubuntu2.8","1:7.2p2-4ubuntu2.10","1:7.2p2-4ubuntu2.10+esm1","1:7.2p2-4ubuntu2.10+esm2","1:7.2p2-4ubuntu2.10+esm3","1:7.2p2-4ubuntu2.10+esm4","1:7.2p2-4ubuntu2.10+esm5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.11"}]}],"versions":["1:8.0p1-6build1","1:8.1p1-1","1:8.1p1-5","1:8.2p1-4","1:8.2p1-4ubuntu0.1","1:8.2p1-4ubuntu0.2","1:8.2p1-4ubuntu0.3","1:8.2p1-4ubuntu0.4","1:8.2p1-4ubuntu0.5","1:8.2p1-4ubuntu0.7","1:8.2p1-4ubuntu0.8","1:8.2p1-4ubuntu0.9","1:8.2p1-4ubuntu0.10"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.6"}]}],"versions":["1:8.4p1-6ubuntu2","1:8.7p1-2","1:8.7p1-2build1","1:8.7p1-4","1:8.8p1-1","1:8.9p1-3","1:8.9p1-3ubuntu0.1","1:8.9p1-3ubuntu0.3","1:8.9p1-3ubuntu0.4","1:8.9p1-3ubuntu0.5"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-11.1"}]}],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openbsd","product":"openssh"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://www.openssh.com/txt/release-9.6","tags":["x_transferred","Release Notes","web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/12/18/2","tags":["x_transferred","Mailing List","Release Notes","web","report"]},{"url":"https://github.com/openssh/openssh-portable/commit/7ef3787c84b6b524501211b11a26c742f829af1a","tags":["x_transferred","Patch","fix","web"]},{"url":"https://www.debian.org/security/2023/dsa-5586","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/12/26/4","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://security.gentoo.org/glsa/202312-17","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240105-0005/","tags":["x_transferred","advisory","web"]},{"url":"https://support.apple.com/kb/HT214084","tags":["x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/21","tags":["mailing-list","x_transferred","article","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/10/07/1","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/10/12/1","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51385","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240105-0005"},{"url":"https://github.com/advisories/GHSA-5mq4-x9g5-4vc4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-51385","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0606","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-48795","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51385","tags":["report"]},{"url":"https://bugzilla.redhat.com/2254210","tags":["report"]},{"url":"https://bugzilla.redhat.com/2255271","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0606.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1130","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1130.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-51385","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2023-11","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1703610859","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1703611900","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1703612125.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1703612727.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2023-1703612912.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1703784959.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2023-1703785060.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1703785140.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51385.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-51385","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0010.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32704","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6565-1","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2023/12/18/3","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/12/19/5","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/12/20/3","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31001","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/07/19/8","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/07/19/9","tags":["web"]},{"url":"https://www.openssh.com/txt/release-9.3p2","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1975","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1976","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1978","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1979","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1980","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0429","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255271","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0429.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48795","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/7071748","tags":["article"]},{"url":"https://terrapin-attack.com/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51385","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0455","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0455.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0594","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0594.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0606.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1130.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1790","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401962","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1790.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61984","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61984","tags":["advisory"]},{"url":"https://marc.info/?l=openssh-unix-dev\u0026m=175974522032149\u0026w=2","tags":["article"]},{"url":"https://www.openssh.com/releasenotes.html#10.1p1","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2025/10/06/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61985","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61985","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61985","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22329","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454506","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22329.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-35385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35385","tags":["advisory"]},{"url":"https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2","tags":["article"]},{"url":"https://www.openssh.org/releasenotes.html#10.3p1","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/02/3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-35386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35386","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-35387","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35387","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-35388","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35388","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35388","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-35414","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35414","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0606","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240596-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218215","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51385","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240603-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240604-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1220110","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242393-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224392","tags":["report"]},{"url":"https://bugzilla.suse.com/1225904","tags":["report"]},{"url":"https://bugzilla.suse.com/1227318","tags":["report"]},{"url":"https://bugzilla.suse.com/1227350","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39894","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520009-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217950","tags":["report"]},{"url":"https://bugzilla.suse.com/1226642","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6387","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-51385","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6560-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6560-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-48795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-51384","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T00:00:00Z","modified":"2026-10-15T00:16:48.983Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:17.48054Z"}],"euvd":[{"id":"EUVD-2023-56106","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T00:00:00Z","modified":"2026-10-15T00:16:48Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-5mq4-x9g5-4vc4","title":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T21:30:27Z","modified":"2026-05-12T12:31:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:08:00.69632Z"}],"nvd":[{"id":"CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T19:15:08.773Z","modified":"2026-10-15T01:17:12.563Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:08:56.329586Z"}],"osv":[{"id":"ALPINE-CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T19:15:08.773Z","modified":"2026-10-26T17:17:58.659975206Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-32203","title":"CVE-2023-51385 affecting package openssh for versions less than 8.9p1-3","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T19:15:08Z","modified":"2026-04-21T04:26:42.304443Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-35082","title":"CVE-2023-51385 affecting package openssh for versions less than 9.7p1-1","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T19:15:08Z","modified":"2026-04-21T04:56:49.872997Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"BELL-CVE-2023-51385","status":"published","published":"2023-12-20T05:57:15.922233Z","modified":"2026-01-26T09:36:48.277636Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:18.192656Z"},{"id":"CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T00:00:00Z","modified":"2026-10-28T10:36:08.751042466Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-18T19:15:08.773Z","modified":"2026-10-26T18:02:35.626313746Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"JLSEC-2026-70","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2026-04-09T21:32:46.691Z","modified":"2026-07-18T00:02:19.815540656Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2023-1975","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.(CVE-2023-51385)","status":"published","published":"2023-12-29T11:06:25Z","modified":"2026-08-18T01:18:06.912053122Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1976","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.(CVE-2023-51385)","status":"published","published":"2023-12-29T11:06:25Z","modified":"2026-08-18T01:18:07.493397996Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1977","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\r\n\r\nThe SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0026apos;s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.(CVE-2023-48795)\r\n\r\nIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.(CVE-2023-51385)","status":"published","published":"2023-12-29T11:06:25Z","modified":"2026-08-18T01:18:07.132992325Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1978","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\r\n\r\nThe SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0026apos;s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.(CVE-2023-48795)\r\n\r\nIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.(CVE-2023-51385)","status":"published","published":"2023-12-29T11:06:25Z","modified":"2026-08-18T01:18:07.616730751Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1979","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\r\n\r\nThe SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0026apos;s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.(CVE-2023-48795)\r\n\r\nIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.(CVE-2023-51385)","status":"published","published":"2023-12-29T11:06:25Z","modified":"2026-08-18T01:18:07.060502754Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1980","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\r\n\r\nIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.(CVE-2023-51385)","status":"published","published":"2023-12-29T11:06:25Z","modified":"2026-08-18T01:18:06.905808688Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:0429","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2024-10-01T23:35:56Z","modified":"2026-10-17T10:02:48Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0455","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2024-10-01T23:35:42Z","modified":"2026-10-17T10:02:48Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0594","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2024-10-01T23:35:30Z","modified":"2026-10-17T10:02:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0606","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2024-10-01T23:35:41Z","modified":"2026-10-17T10:02:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:1130","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2024-10-01T23:37:33Z","modified":"2026-10-17T10:02:57Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2026:1790","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-02-03T10:13:58Z","modified":"2026-09-02T10:10:44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:22329","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-06-02T10:08:41Z","modified":"2026-10-03T10:07:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2023-51385","title":"CVE-2023-51385 in openssh - Patched by Root","description":"Root has patched CVE-2023-51385 in the openssh package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-11-06T11:05:54Z","modified":"2026-11-06T12:15:02.685726507Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-06T12:43:08.762989Z"},{"id":"UBUNTU-CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.","status":"published","published":"2023-12-20T00:00:00Z","modified":"2026-10-17T12:57:22.00515205Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2024:0606","title":"Moderate: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)\n* openssh: potential command injection via shell metacharacters (CVE-2023-51385)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-30T00:00:00Z","modified":"2026-10-29T11:02:27.281102019Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:1130","title":"Moderate: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)\n* openssh: potential command injection via shell metacharacters (CVE-2023-51385)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-03-05T00:00:00Z","modified":"2026-10-29T11:31:05.462546822Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2023-1703610859","title":"Fix CVE(s): CVE-2023-51385","description":"\n   * SECURITY UPDATE: possible OS command injection\n     - debian/patches/CVE-2023-51385.patch: ban user/hostnames with most\n       shell metacharacters in command line\n     - CVE-2023-51385","status":"published","published":"2023-12-26T17:14:23Z","modified":"2026-06-04T10:04:26.555083Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2023-1703611900","title":"Fix CVE(s): CVE-2023-51385","description":"\n   * SECURITY UPDATE: possible OS command injection\n     - debian/patches/CVE-2023-51385.patch: ban user/hostnames with most\n       shell metacharacters in command line\n     - CVE-2023-51385","status":"published","published":"2023-12-26T17:31:44Z","modified":"2026-06-04T10:03:12.035661Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2023-1703612125","title":"openssh: Fix of CVE-2023-51385","description":"- CVE-2023-51385: ban user/hostnames with most shell metacharacters in\n  command line","status":"published","published":"2023-12-26T17:35:29Z","modified":"2026-06-01T00:32:26.691548447Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2023-1703612727","title":"openssh: Fix of CVE-2023-51385","description":"- CVE-2023-51385: ban user/hostnames with most shell metacharacters in\n  command line","status":"published","published":"2023-12-26T17:45:31Z","modified":"2026-06-01T00:33:22.151731008Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2023-1703612912","title":"openssh: Fix of CVE-2023-51385","description":"- CVE-2023-51385: ban user/hostnames with most shell metacharacters in\n  command line","status":"published","published":"2023-12-26T17:48:35Z","modified":"2026-06-01T00:33:03.799398991Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2023-1703784959","title":"openssh: Fix of CVE-2023-51385","description":"- CVE-2023-51385: ban user/hostnames with most shell metacharacters in\n  command line","status":"published","published":"2023-12-28T17:36:04Z","modified":"2026-06-01T00:33:25.073735218Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2023-1703785060","title":"openssh: Fix of CVE-2023-51385","description":"- CVE-2023-51385: ban user/hostnames with most shell metacharacters in\n  command line","status":"published","published":"2023-12-28T17:37:44Z","modified":"2026-06-01T00:30:05.878837348Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2023-1703785140","title":"openssh: Fix of CVE-2023-51385","description":"- CVE-2023-51385: ban user/hostnames with most shell metacharacters in\n  command line","status":"published","published":"2023-12-28T17:39:04Z","modified":"2026-06-01T00:33:02.78775106Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"DLA-3694-1","title":"openssh - security update","status":"published","published":"2023-12-25T00:00:00Z","modified":"2026-03-09T01:22:50.581088Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5586-1","title":"openssh - security update","status":"published","published":"2023-12-22T00:00:00Z","modified":"2026-03-09T02:11:35.05878Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0010","title":"Updated openssh packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an\ninsufficiently trustworthy search path, leading to remote code execution\nif an agent is forwarded to an attacker-controlled system.\n(CVE-2023-38408)\nPrefix Truncation Attacks in SSH Specification (Terrapin Attack).\n(CVE-2023-48795)\nIn ssh-agent in OpenSSH before 9.6, certain destination constraints can\nbe incompletely applied. When destination constraints are specified\nduring addition of PKCS#11-hosted private keys, these constraints are\nonly applied to the first key, even if a PKCS#11 token returns multiple\nkeys. (CVE-2023-51384)\nIn ssh in OpenSSH before 9.6, OS command injection might occur if a user\nname or host name has shell metacharacters, and this name is referenced\nby an expansion token in certain situations. For example, an untrusted\nGit repository can have a submodule with shell metacharacters in a user\nname or host name. (CVE-2023-51385)\n","status":"published","published":"2024-01-14T22:23:43Z","modified":"2026-04-16T04:41:56.357688725Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14113-1","title":"openssh-9.6p1-11.1 on GA media","description":"These are all security issues fixed in the openssh-9.6p1-11.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-08T00:00:00Z","modified":"2026-02-04T04:18:32.857437Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:0606","title":"Moderate: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)\n\n* openssh: potential command injection via shell metacharacters (CVE-2023-51385)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-02-12T20:17:16.806645Z","modified":"2026-02-04T07:40:23.692133Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:0596-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2023-51385: Limit the use of shell metacharacters in host- and\n  user names to avoid command injection. (bsc#1218215)\n","status":"published","published":"2024-02-22T19:05:39Z","modified":"2025-05-02T04:35:47.390463Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0603-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2023-51385: Fixed command injection via user name or host name metacharacters (bsc#1218215).\n","status":"published","published":"2024-02-23T08:45:47Z","modified":"2026-02-04T02:30:18.301793Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0604-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2023-51385: Fixed a command injection via user name or host name metacharacters (bsc#1218215).\n\n- Remember the state of sshd service during update / removal, to allow cut-over to a different openssh package. bsc#1220110\n","status":"published","published":"2024-02-23T08:46:08Z","modified":"2026-02-04T02:59:48.182035Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:2393-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\nSecurity fixes:\n\n- CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318).\n\nOther fixes:\n- Add obsoletes for openssh-server-config-rootlogin (bsc#1227350).\n- Add #include \u003cstdlib.h\u003e in some files added by the ldap patch to\n  fix build with gcc14 (bsc#1225904).\n- Remove the recommendation for openssh-server-config-rootlogin\n  from openssh-server (bsc#1224392).\n","status":"published","published":"2024-07-10T15:33:48Z","modified":"2026-02-04T03:40:21.254463Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2025:20009-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318)\n- CVE-2024-6387: Fixed race condition in a signal handler (bsc#1226642).\n","status":"published","published":"2025-02-03T08:47:06Z","modified":"2026-03-23T04:50:01.776068Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-6560-2","title":"openssh vulnerabilities","description":"USN-6560-1 fixed several vulnerabilities in OpenSSH. This update provides\nthe corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH\n protocol was vulnerable to a prefix truncation attack. If a remote attacker\n was able to intercept SSH communications, extension negotiation messages\n could be truncated, possibly leading to certain algorithms and features\n being downgraded. This issue is known as the Terrapin attack. This update\n adds protocol extensions to mitigate this issue. (CVE-2023-48795)\n\n It was discovered that OpenSSH incorrectly handled user names or host names\n with shell metacharacters. An attacker could possibly use this issue to\n perform OS command injection. This only affected Ubuntu 18.04 LTS. (CVE-2023-51385)\n","status":"published","published":"2024-01-11T16:53:56Z","modified":"2026-06-25T13:32:23.788798772Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6560-3","title":"openssh vulnerability","description":"USN-6560-2 fixed a vulnerability in OpenSSH. This update provides\nthe corresponding update for Ubuntu 16.04 LTS.\n\n\nOriginal advisory details:\n\n It was discovered that OpenSSH incorrectly handled user names or host\n names with shell metacharacters. An attacker could possibly use this\n issue to perform OS command injection.\n","status":"published","published":"2024-09-16T09:59:11Z","modified":"2026-06-25T13:32:23.974239249Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6565-1","title":"openssh vulnerabilities","description":"It was discovered that OpenSSH incorrectly handled supplemental groups when\nrunning helper programs for AuthorizedKeysCommand and\nAuthorizedPrincipalsCommand as a different user. An attacker could possibly\nuse this issue to escalate privileges. This issue only affected Ubuntu\n20.04 LTS. (CVE-2021-41617)\n\nIt was discovered that OpenSSH incorrectly added destination constraints\nwhen PKCS#11 token keys were added to ssh-agent, contrary to expectations.\nThis issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04.\n(CVE-2023-51384)\n\nIt was discovered that OpenSSH incorrectly handled user names or host names\nwith shell metacharacters. An attacker could possibly use this issue to\nperform OS command injection. (CVE-2023-51385)\n","status":"published","published":"2024-01-03T18:00:01Z","modified":"2026-05-29T18:00:44.760230769Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}