{"id":"CVE-2025-32728","aliases":["ALPINE-CVE-2025-32728","ALSA-2025:20126","AZL-59775","AZL-59888","BELL-CVE-2025-32728","CLSA-2025-1749482356","CLSA-2025-1749552061","CLSA-2025-1749567722","CLSA-2025-1749821936","CLSA-2025-1749822032","CLSA-2025-1750785613","CLSA-2025-1751144978","CLSA-2025-1766567686","CLSA-2026-1778932403","DEBIAN-CVE-2025-32728","DLA-4156-1","EUVD-2025-10504","GHSA-26mg-p594-q328","JLSEC-2026-73","MGASA-2025-0157","OESA-2025-1439","OESA-2025-1440","OESA-2025-1550","OESA-2025-1664","OESA-2025-1665","RHSA-2025:20126","RLSA-2025:20126","SUSE-SU-2025:01638-1","SUSE-SU-2025:01638-2","SUSE-SU-2025:1576-1","SUSE-SU-2026:23249-1","UBUNTU-CVE-2025-32728","USN-7457-1","openSUSE-SU-2025:15091-1"],"status":"published","title":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.002,"percentile":0.10004,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-440"],"published":"2025-04-10T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"openssh","fixed_in":["10.0_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openssh","fixed_in":["10.0_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openssh","fixed_in":["10.0_p1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"openssh","fixed_in":["9.9p1-11.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"openssh-askpass","fixed_in":["9.9p1-11.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"openssh-clients","fixed_in":["9.9p1-11.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"openssh-keycat","fixed_in":["9.9p1-11.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"openssh-keysign","fixed_in":["9.9p1-11.el10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"openssh-server","fixed_in":["9.9p1-11.el10.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openssh","fixed_in":["8.9p1-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"openssh","fixed_in":["9.8p1-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openssh","fixed_in":["9.1_p1-r10"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openssh","fixed_in":["10.0_p1-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openssh","fixed_in":["9.1_p1-r10"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openssh","fixed_in":["10.0_p1-r1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh","fixed_in":["8.0p1-10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-askpass","fixed_in":["8.0p1-10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-cavs","fixed_in":["8.0p1-10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-clients","fixed_in":["8.0p1-10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-keycat","fixed_in":["8.0p1-10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-ldap","fixed_in":["8.0p1-10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openssh-server","fixed_in":["8.0p1-10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-7.10.el8.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-askpass","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-cavs","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-clients","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-keycat","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-ldap","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openssh-server","fixed_in":["8.0p1-6.el8_4.2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-7.6.el8_4.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh","fixed_in":["8.0p1-24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-askpass","fixed_in":["8.0p1-24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-cavs","fixed_in":["8.0p1-24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-clients","fixed_in":["8.0p1-24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-keycat","fixed_in":["8.0p1-24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-ldap","fixed_in":["8.0p1-24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-server","fixed_in":["8.0p1-24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-7.24.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh-askpass","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh-cavs","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh-clients","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh-keycat","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh-ldap","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh-server","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"openssh-server-sysvinit","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-2.23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-askpass","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-cavs","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-clients","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-keycat","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-ldap","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server-sysvinit","fixed_in":["7.4p1-23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"pam_ssh_agent_auth","fixed_in":["0.10.3-2.23.0.3.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-client","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-server","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-sftp-server","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh-askpass-gnome","fixed_in":["1:7.6p1-4ubuntu0.7+tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh","fixed_in":["8.7p1-30.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-askpass","fixed_in":["8.7p1-30.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-clients","fixed_in":["8.7p1-30.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-keycat","fixed_in":["8.7p1-30.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-server","fixed_in":["8.7p1-30.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-sk-dummy","fixed_in":["8.7p1-30.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam_ssh_agent_auth","fixed_in":["0.10.4-5.30.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"openssh-client","fixed_in":["1:7.9p1-10+deb10u4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"openssh-server","fixed_in":["1:7.9p1-10+deb10u4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"openssh-sftp-server","fixed_in":["1:7.9p1-10+deb10u4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"openssh-tests","fixed_in":["1:7.9p1-10+deb10u4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ssh","fixed_in":["1:7.9p1-10+deb10u4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ssh-askpass-gnome","fixed_in":["1:7.9p1-10+deb10u4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh","fixed_in":["8.7p1-45.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-askpass","fixed_in":["8.7p1-45.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-clients","fixed_in":["8.7p1-45.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-keycat","fixed_in":["8.7p1-45.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-server","fixed_in":["8.7p1-45.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-sk-dummy","fixed_in":["8.7p1-45.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"pam_ssh_agent_auth","fixed_in":["0.10.4-5.45.el9.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openssh","fixed_in":["1:9.2p1-2+deb12u6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssh","fixed_in":["1:10.0p1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssh","fixed_in":["1:10.0p1-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"openssh","fixed_in":["1:8.4p1-5+deb11u5"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenSSH_jll","fixed_in":["10.0.1+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"openssh","fixed_in":["9.3p1-2.5.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"openssh","fixed_in":["8.8p1-35.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"openssh","fixed_in":["8.8p1-35.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"openssh","fixed_in":["9.6p1-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-askpass","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-askpass-debuginfo","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-clients-debuginfo","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-debuginfo","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-debugsource","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keycat-debuginfo","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keysign","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keysign-debuginfo","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-server-debuginfo","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-sk-dummy-debuginfo","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-clients","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keycat","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-server","fixed_in":["0:9.9p1-11.el10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"openssh","fixed_in":["0:9.9p1-11.el10.rocky.0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openssh","fixed_in":["9.6p1-150600.6.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"openssh-askpass-gnome","fixed_in":["9.6p1-150600.6.26.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openssh","fixed_in":["9.6p1-150600.6.26.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"openssh-askpass-gnome","fixed_in":["9.6p1-150600.6.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openssh","fixed_in":["9.6p1-150600.6.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"openssh-askpass-gnome","fixed_in":["9.6p1-150600.6.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh-askpass-gnome","fixed_in":["8.4p1-150300.3.49.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openssh","fixed_in":["1:8.2p1-4ubuntu0.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssh","fixed_in":["1:8.2p1-4ubuntu0.fips.0.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openssh","fixed_in":["1:8.9p1-3ubuntu0.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"openssh","fixed_in":["1:8.9p1-3ubuntu0.13+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openssh","fixed_in":["1:9.6p1-3ubuntu13.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"openssh","fixed_in":["1:9.6p1-3ubuntu13.12+Fips1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"openssh","fixed_in":["1:9.9p1-3ubuntu3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openssh","fixed_in":["10.0p2-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.4"},{"fixed":"10.0_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.4"},{"fixed":"10.0_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.4"},{"fixed":"10.0_p1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-11.el10.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9p1-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8p1-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1_p1-r3"},{"fixed":"9.1_p1-r10"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3_p1-r7"},{"fixed":"10.0_p1-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1_p1-r3"},{"fixed":"9.1_p1-r10"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3_p1-r7"},{"fixed":"10.0_p1-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-7.10.el8.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-6.el8_4.2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-7.6.el8_4.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-7.24.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"openssh-server-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-2.23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"openssh-server-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4p1-23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-2.23.0.3.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openssh-sftp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-5.30.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"openssh-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10+deb10u4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10+deb10u4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"openssh-sftp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10+deb10u4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"openssh-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10+deb10u4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10+deb10u4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10+deb10u4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-5.45.el9.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.2p1-2+deb12u6"}]}],"versions":["1:9.2p1-2","1:9.2p1-2+deb12u1","1:9.2p1-2+deb12u2","1:9.2p1-2+deb12u3","1:9.2p1-2+deb12u4","1:9.2p1-2+deb12u5"]},{"source":"osv","ecosystem":"Debian:13","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.0p1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.0p1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.4p1-5+deb11u5"}]}],"versions":["1:8.4p1-5","1:8.4p1-5+deb11u1","1:8.4p1-5+deb11u2","1:8.4p1-5+deb11u3","1:8.4p1-5+deb11u4"]},{"source":"osv","ecosystem":"Julia","package":"OpenSSH_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"10.0.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3p1-2.5.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3p2-8.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2p1-31.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8p1-35.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.8p1-35.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keysign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-11.el10.rocky.0.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.26.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.26.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-150600.6.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"openssh-askpass-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4p1-150300.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6p1-6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-10","1:7.6p1-4","1:7.6p1-4ubuntu0.1","1:7.6p1-4ubuntu0.2","1:7.6p1-4ubuntu0.3","1:7.6p1-4ubuntu0.5","1:7.6p1-4ubuntu0.6","1:7.6p1-4ubuntu0.7","1:7.6p1-4ubuntu0.7+esm1","1:7.6p1-4ubuntu0.7+esm2","1:7.6p1-4ubuntu0.7+esm3","1:7.6p1-4ubuntu0.7+esm4","1:7.6p1-4ubuntu0.7+esm5","1:7.6p1-4ubuntu0.7+esm6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-8","1:7.5p1-9","1:7.5p1-9build1","1:7.5p1-10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2","1:7.9p1-10~ubuntu18.04.fips.0.3","1:7.9p1-10~ubuntu18.04.fips.0.4","1:7.9p1-10~ubuntu18.04.fips.0.5","1:7.9p1-10~ubuntu18.04.fips.0.6","1:7.9p1-10~ubuntu18.04.fips.0.7","1:7.9p1-10~ubuntu18.04.fips.0.8","1:7.9p1-10~ubuntu18.04.fips.0.9","1:7.9p1-10~ubuntu18.04.fips.0.10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.13"}]}],"versions":["1:8.0p1-6build1","1:8.1p1-1","1:8.1p1-5","1:8.2p1-4","1:8.2p1-4ubuntu0.1","1:8.2p1-4ubuntu0.2","1:8.2p1-4ubuntu0.3","1:8.2p1-4ubuntu0.4","1:8.2p1-4ubuntu0.5","1:8.2p1-4ubuntu0.7","1:8.2p1-4ubuntu0.8","1:8.2p1-4ubuntu0.9","1:8.2p1-4ubuntu0.10","1:8.2p1-4ubuntu0.11","1:8.2p1-4ubuntu0.12"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-11build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.fips.0.13"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1","1:8.2p1-4ubuntu0.fips.0.4.0","1:8.2p1-4ubuntu0.fips.0.5.0","1:8.2p1-4ubuntu0.fips.0.7","1:8.2p1-4ubuntu0.fips.0.8","1:8.2p1-4ubuntu0.fips.0.9","1:8.2p1-4ubuntu0.fips.0.10","1:8.2p1-4ubuntu0.fips.0.11","1:8.2p1-4ubuntu0.fips.0.12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.13"}]}],"versions":["1:8.4p1-6ubuntu2","1:8.7p1-2","1:8.7p1-2build1","1:8.7p1-4","1:8.8p1-1","1:8.9p1-3","1:8.9p1-3ubuntu0.1","1:8.9p1-3ubuntu0.3","1:8.9p1-3ubuntu0.4","1:8.9p1-3ubuntu0.5","1:8.9p1-3ubuntu0.6","1:8.9p1-3ubuntu0.7","1:8.9p1-3ubuntu0.10","1:8.9p1-3ubuntu0.11"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-12","1:7.5p1-12build1","1:7.5p1-13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-preview:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.9p1-3ubuntu0.4+Fips1","1:8.9p1-3ubuntu0.4+Fips3","1:8.9p1-3ubuntu1.fips.0~ppa3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.13+Fips1"}]}],"versions":["1:8.9p1-3ubuntu0.4+Fips1","1:8.9p1-3ubuntu0.4+Fips3","1:8.9p1-3ubuntu0.6+Fips1","1:8.9p1-3ubuntu0.7+Fips1","1:8.9p1-3ubuntu0.10+Fips1","1:8.9p1-3ubuntu0.11+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu13.11"}]}],"versions":["1:9.3p1-1ubuntu3","1:9.4p1-1ubuntu1","1:9.6p1-3ubuntu1","1:9.6p1-3ubuntu2","1:9.6p1-3ubuntu11","1:9.6p1-3ubuntu12","1:9.6p1-3ubuntu13","1:9.6p1-3ubuntu13.3","1:9.6p1-3ubuntu13.4","1:9.6p1-3ubuntu13.5","1:9.6p1-3ubuntu13.7","1:9.6p1-3ubuntu13.8","1:9.6p1-3ubuntu13.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-14","1:7.5p1-15","1:7.5p1-15build1","1:7.5p1-16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:24.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu13.12+Fips1"}]}],"versions":["1:9.6p1-3ubuntu13.7+Fips1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9p1-3ubuntu3.1"}]}],"versions":["1:9.9p1-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-18","1:7.5p1-18ubuntu1","1:7.5p1-18ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17","1:7.5p1-18"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.13"}]}],"versions":["1:8.0p1-6build1","1:8.1p1-1","1:8.1p1-5","1:8.2p1-4","1:8.2p1-4ubuntu0.1","1:8.2p1-4ubuntu0.2","1:8.2p1-4ubuntu0.3","1:8.2p1-4ubuntu0.4","1:8.2p1-4ubuntu0.5","1:8.2p1-4ubuntu0.7","1:8.2p1-4ubuntu0.8","1:8.2p1-4ubuntu0.9","1:8.2p1-4ubuntu0.10","1:8.2p1-4ubuntu0.11","1:8.2p1-4ubuntu0.12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.13"}]}],"versions":["1:8.4p1-6ubuntu2","1:8.7p1-2","1:8.7p1-2build1","1:8.7p1-4","1:8.8p1-1","1:8.9p1-3","1:8.9p1-3ubuntu0.1","1:8.9p1-3ubuntu0.3","1:8.9p1-3ubuntu0.4","1:8.9p1-3ubuntu0.5","1:8.9p1-3ubuntu0.6","1:8.9p1-3ubuntu0.7","1:8.9p1-3ubuntu0.10","1:8.9p1-3ubuntu0.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu13.11"}]}],"versions":["1:9.3p1-1ubuntu3","1:9.4p1-1ubuntu1","1:9.6p1-3ubuntu1","1:9.6p1-3ubuntu2","1:9.6p1-3ubuntu11","1:9.6p1-3ubuntu12","1:9.6p1-3ubuntu13","1:9.6p1-3ubuntu13.3","1:9.6p1-3ubuntu13.4","1:9.6p1-3ubuntu13.5","1:9.6p1-3ubuntu13.7","1:9.6p1-3ubuntu13.8","1:9.6p1-3ubuntu13.9"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0p2-2.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openbsd","product":"openssh"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html","tags":["Mailing List","Product","Release Notes","web","article","report"]},{"url":"https://www.openssh.com/txt/release-10.0","tags":["Release Notes","web","report"]},{"url":"https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367","tags":["Patch","fix","web"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig","tags":["Product","web","report"]},{"url":"https://www.openssh.com/txt/release-7.4","tags":["Release Notes","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20250425-0002/","tags":["Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00008.html","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32728","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250425-0002","tags":["web"]},{"url":"https://github.com/advisories/GHSA-26mg-p594-q328","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-32728","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:20126","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32728","tags":["report"]},{"url":"https://bugzilla.redhat.com/2358767","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-20126.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-32728","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1749482356.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1749552061.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1749567722.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1749821936.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1749822032.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1750785613.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1751144978.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1766567686.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778932403.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32728.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32728","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0157.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34224","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7457-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1439","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26465","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1440","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1550","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1664","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1665","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.1_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358767","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-40790","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-58252","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-68124","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-68346","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-93957","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20126.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32728","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2025:20126","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501638-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236826","tags":["report"]},{"url":"https://bugzilla.suse.com/1239671","tags":["report"]},{"url":"https://bugzilla.suse.com/1241012","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32728","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501638-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251576-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1228634","tags":["report"]},{"url":"https://bugzilla.suse.com/1232533","tags":["report"]},{"url":"https://bugzilla.suse.com/1241045","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623249-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241667","tags":["report"]},{"url":"https://bugzilla.suse.com/1259642","tags":["report"]},{"url":"https://bugzilla.suse.com/1261427","tags":["report"]},{"url":"https://bugzilla.suse.com/1261430","tags":["report"]},{"url":"https://bugzilla.suse.com/1261441","tags":["report"]},{"url":"https://bugzilla.suse.com/1264568","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35414","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-32728","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q5UQZOWOF6UQC4FQEDFUAJ5JGLMDUARW/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32728","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T00:00:00Z","modified":"2026-10-15T01:06:04.078Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T14:32:46.109993Z"}],"euvd":[{"id":"EUVD-2025-10504","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T00:00:00Z","modified":"2026-10-15T01:06:04Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T17:27:07.544788Z"}],"ghsa":[{"id":"GHSA-26mg-p594-q328","title":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T03:31:32Z","modified":"2026-10-15T03:34:46Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T15:13:31.301503Z"}],"nvd":[{"id":"CVE-2025-32728","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T02:15:30.873Z","modified":"2026-10-15T02:17:48.267Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T14:11:00.087098Z"}],"osv":[{"id":"ALPINE-CVE-2025-32728","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T02:15:30.873Z","modified":"2026-08-27T22:18:02.886971101Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"AZL-59775","title":"CVE-2025-32728 affecting package openssh for versions less than 8.9p1-8","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T02:15:30Z","modified":"2026-04-21T04:33:41.680777Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59888","title":"CVE-2025-32728 affecting package openssh for versions less than 9.8p1-4","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T02:15:30Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"BELL-CVE-2025-32728","status":"published","published":"2025-04-11T05:58:50.576487Z","modified":"2026-01-26T09:39:08.0468Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-32728","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T00:00:00Z","modified":"2026-10-28T10:59:04.555972722Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-32728","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T02:15:30.873Z","modified":"2026-10-15T09:47:32.802146559Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"JLSEC-2026-73","title":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation...","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2026-04-09T21:32:46.691Z","modified":"2026-07-25T18:24:00.947764651Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2025-1439","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client\u0026apos;s memory resource first, turning the attack complexity high.(CVE-2025-26465)\n\nIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.(CVE-2025-32728)","status":"published","published":"2025-04-18T11:08:32Z","modified":"2026-08-18T01:18:50.194176524Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1440","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client\u0026apos;s memory resource first, turning the attack complexity high.(CVE-2025-26465)\n\nIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.(CVE-2025-32728)","status":"published","published":"2025-04-18T11:08:32Z","modified":"2026-08-18T01:18:45.825870001Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1550","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\n\nIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.(CVE-2025-32728)","status":"published","published":"2025-05-23T11:08:38Z","modified":"2026-08-18T01:17:58.711894192Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1664","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\n\nOpenSSH (OpenBSD Secure Shell) is a set of connection tools for secure access to remote computers in the Canadian OpenBSD program group. This tool is an open source implementation of the SSH protocol, supports encryption of all transmissions, and can effectively prevent eavesdropping, connection hijacking, and other network-level attacks.\n OpenSSH (OpenBSD Secure Shell) versions before 10.0 have a security vulnerability that originated from the DisableForwarding directive that does not correctly disable X11 and proxy forwarding.(CVE-2025-32728)","status":"published","published":"2025-06-20T11:08:45Z","modified":"2026-08-18T01:18:00.936214211Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1665","title":"openssh security update","description":"OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \\ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \\ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \\ capabilities, several authentication methods, and sophisticated configuration options.\r\n\r\nSecurity Fix(es):\n\nOpenSSH (OpenBSD Secure Shell) is a set of connection tools for secure access to remote computers in the Canadian OpenBSD program group. This tool is an open source implementation of the SSH protocol, supports encryption of all transmissions, and can effectively prevent eavesdropping, connection hijacking, and other network-level attacks.\n OpenSSH (OpenBSD Secure Shell) versions before 10.0 have a security vulnerability that originated from the DisableForwarding directive that does not correctly disable X11 and proxy forwarding.(CVE-2025-32728)","status":"published","published":"2025-06-20T11:08:45Z","modified":"2026-08-18T01:18:00.677050672Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2025:20126","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2025-11-11T10:07:41Z","modified":"2026-09-02T10:06:00Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RLSA-2025:20126","title":"Moderate: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding (CVE-2025-32728)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.","status":"published","published":"2026-05-21T16:30:00.730913Z","modified":"2026-05-21T17:00:03.881152236Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-32728","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.","status":"published","published":"2025-04-10T02:15:00Z","modified":"2026-10-17T12:57:27.304170265Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","level":"medium"},{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"ALSA-2025:20126","title":"Moderate: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  \n\nSecurity Fix(es):  \n\n  * openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding (CVE-2025-32728)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2025-11-11T00:00:00Z","modified":"2026-10-29T11:58:14.647263Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2025-1749482356","title":"openssh: Fix of CVE-2025-32728","description":"- CVE-2025-32728: fix logic error in DisableForwarding option","status":"published","published":"2025-06-09T15:19:21Z","modified":"2026-06-01T00:33:23.160661783Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1749552061","title":"openssh: Fix of CVE-2025-32728","description":"- CVE-2025-32728: fix logic error in DisableForwarding option","status":"published","published":"2025-06-10T10:41:05Z","modified":"2026-06-01T00:33:21.207558874Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1749567722","title":"openssh: Fix of CVE-2025-32728","description":"- CVE-2025-32728: fix logic error in DisableForwarding option","status":"published","published":"2025-06-10T15:07:12Z","modified":"2026-06-01T00:32:58.431822295Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1749821936","title":"openssh: Fix of CVE-2025-32728","description":"- CVE-2025-32728: fix logic error in DisableForwarding option","status":"published","published":"2025-06-13T13:39:00Z","modified":"2026-06-01T00:33:27.436459958Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1749822032","title":"openssh: Fix of CVE-2025-32728","description":"- CVE-2025-32728: fix logic error in DisableForwarding option","status":"published","published":"2025-06-13T13:40:38Z","modified":"2026-06-01T00:32:44.906930442Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1750785613","title":"Fix CVE(s): CVE-2025-32728","description":"   * SECURITY UPDATE: DisableForwarding directive does not adhere to the\n     documentation stating that it disables X11 and agent forwarding.\n     - debian/patches/CVE-2025-32728.patch: fix logic error in DisableForwarding\n       option\n     - CVE-2025-32728","status":"published","published":"2025-06-24T17:20:20Z","modified":"2026-06-04T10:04:00.327838Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751144978","title":"openssh: Fix of CVE-2025-32728","description":"- CVE-2025-32728: fix logic error in DisableForwarding option","status":"published","published":"2025-06-28T21:09:43Z","modified":"2026-06-01T00:30:55.906477727Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1766567686","title":"Fix CVE(s): CVE-2025-32728","description":"   * SECURITY UPDATE: DisableForwarding directive does not adhere to the\n     documentation stating that it disables X11 and agent forwarding.\n     - debian/patches/CVE-2025-32728.patch: fix logic error in DisableForwarding\n       option\n     - CVE-2025-32728","status":"published","published":"2025-12-24T09:14:50Z","modified":"2026-06-04T10:04:20.194021Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1778932403","title":"openssh: Fix of CVE-2025-32728","description":"- CVE-2025-32728: fix logic error in DisableForwarding option","status":"published","published":"2026-05-16T11:53:28Z","modified":"2026-06-01T00:32:53.646499643Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-4156-1","title":"openssh - security update","status":"published","published":"2025-05-08T00:00:00Z","modified":"2026-03-09T01:21:28.807815Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0157","title":"Updated openssh packages fix security vulnerability","description":"In sshd in OpenSSH before 10.0, the DisableForwarding directive does not\nadhere to the documentation stating that it disables X11 and agent\nforwarding. (CVE-2025-32728)\n","status":"published","published":"2025-05-16T19:44:48Z","modified":"2026-04-16T04:43:51.209656475Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15091-1","title":"openssh-10.0p2-2.1 on GA media","description":"These are all security issues fixed in the openssh-10.0p2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-15T00:00:00Z","modified":"2026-03-23T04:53:24.247496Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01638-1","title":"Security update for openssh","description":"This update for openssh fixes the following issue:\n\nSecurity fixes:\n\n- CVE-2025-32728: Fixed logic error in DisableForwarding option (bsc#1241012)\n\nOther fixes:\n- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2\n  due to gssapi proposal not being correctly initialized (bsc#1236826).\n  The problem was introduced in the rebase of the patch for 9.6p1\n- Enable --with-logind to call the SetTTY dbus method in systemd.\n  This allows 'wall' to print messages in ssh ttys (bsc#1239671)\n","status":"published","published":"2025-05-21T10:48:36Z","modified":"2026-03-23T04:46:18.33037Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01638-2","title":"Security update for openssh","description":"This update for openssh fixes the following issue:\n\nSecurity fixes:\n\n- CVE-2025-32728: Fixed logic error in DisableForwarding option (bsc#1241012)\n\nOther fixes:\n- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2\n  due to gssapi proposal not being correctly initialized (bsc#1236826).\n  The problem was introduced in the rebase of the patch for 9.6p1\n- Enable --with-logind to call the SetTTY dbus method in systemd.\n  This allows 'wall' to print messages in ssh ttys (bsc#1239671)\n","status":"published","published":"2025-06-06T10:04:40Z","modified":"2026-03-23T04:49:29.119774Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1576-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- Security issues fixed:\n    \n  * CVE-2025-32728: Fixed a logic error in DisableForwarding option (bsc#1241012)\n    \n- Other bugs fixed:\n\n  * Allow KEX hashes greater than 256 bits (bsc#1241045)\n  * Fixed hostname being left out of the audit output (bsc#1228634)\n  * Fixed failures with very large MOTDs (bsc#1232533)\n\n","status":"published","published":"2025-05-19T04:49:08Z","modified":"2026-02-04T03:29:19.0587Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2026:23249-1","title":"Security update for openssh","description":"This update for openssh fixes the following issues:\n\n- CVE-2025-32728: fix logic error in DisableForwarding option (bsc#1241012).\n- CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642).\n- CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427).\n\nOther issues fixed::\n\n- ignores write permissions for Group and World Directory Permissions (bsc#1241667).\n- wall tool not longer printing any message to terminals (bsc#1239671)\n- potential issue in validating mac (bsc#1264568):\n * Improve %prep LDAP regex to preserve subdirectories (e.g., ope-\n   nbsd-compat/) and handle optional [ab]/ prefixes.\n","status":"published","published":"2026-08-21T14:14:36Z","modified":"2026-08-27T18:23:11.802863427Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"USN-7457-1","title":"openssh vulnerability","description":"It was discovered that OpenSSH incorrectly handled the DisableForwarding\ndirective. The directive would fail to disable X11 and agent forwarding,\ncontrary to documentation and expectations.\n","status":"published","published":"2025-04-24T12:40:43Z","modified":"2026-04-27T17:55:20.524682Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}