Packages / Debian 12 (Bookworm) / net / openssh-client-gssapi

[Source: openssh]

Package: openssh-client-gssapi (1:10.0p1-7~bpo12+1)

Secure-Shell-(SSH)-Client mit GSS-API-Unterstützung

Other Packages Related to openssh-client-gssapi:

  • dep: [openssh-client] (>= 1:10.0p1-7~bpo12+1)

    Secure-Shell-(SSH)-Client für sicheren Zugriff auf entfernte Rechner

Download openssh-client-gssapi

ArchitecturePackage sizeInstalled sizeFilesPackage
all144 KiB156 KiBlist of filesDownload

Paketdateipfade (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) backports main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 12 (Bookworm) im Browser testenImage mit openssh-client-gssapi bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:10.0p1-7~bpo12+1bookworm-backports / mainallDebian 12 backports · main · amd64144 KiB156 KiBpool/main/o/openssh/openssh-client-gssapi_10.0p1-7~bpo12+1_all.deb
1:10.0p1-7~bpo12+1bookworm-backports / mainallDebian 12 backports · main · arm64144 KiB156 KiBpool/main/o/openssh/openssh-client-gssapi_10.0p1-7~bpo12+1_all.deb

Field source: Debian 12 (Bookworm) backports main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-106589]

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForw

Low(2.9)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-106583]

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

[CVE-2026-106587]

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-106586]

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh · debian · bookworm; nvd · openssh

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh · debian · bookworm; nvd · openssh

[CVE-2026-106585]

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

[CVE-2026-106584]

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarcti

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

[CVE-2026-106582]

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

[CVE-2026-106555]

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

[CVE-2026-106553]

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

[CVE-2026-106552]

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm

[CVE-2026-73281]

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction betw

Medium(4.8)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-73282]

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Medium(5.6)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-73283]

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Medium(5.4)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-59995]

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Medium(5.4)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-59996]

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

Medium(4.6)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-59997]

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended securi

Medium(5.4)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-59998]

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-59999]

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

High(7.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-60000]

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthenticat

Medium(5.9)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[CVE-2026-60001]

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

Medium(6.5)Betroffen
Details (2)

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

  • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

    Betroffen

    nvd · openssh · debian · bookworm; nvd · openssh · debian · 12

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:10.0p1-7~bpo12+1 / allBeobachtet Sep 1, 2026sha256 8729d44bb8eb…5e3a6926Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 8729d44bb8eb6d692ed7a0e3d7f3fc8d2044cfbd339c055c58a050da5e3a6926

Download prüfen

printf '%s %s\n' '8729d44bb8eb6d692ed7a0e3d7f3fc8d2044cfbd339c055c58a050da5e3a6926' 'openssh-client-gssapi_10.0p1-7~bpo12+1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) backports main amd64

1:10.0p1-7~bpo12+1 / allBeobachtet Sep 1, 2026sha256 8729d44bb8eb…5e3a6926Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 8729d44bb8eb6d692ed7a0e3d7f3fc8d2044cfbd339c055c58a050da5e3a6926

Download prüfen

printf '%s %s\n' '8729d44bb8eb6d692ed7a0e3d7f3fc8d2044cfbd339c055c58a050da5e3a6926' 'openssh-client-gssapi_10.0p1-7~bpo12+1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) backports main arm64

Quellen

  • Debian 12 (Bookworm) backports main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Observed SHA-256
    b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
    Result
    match verified
  • Debian 12 (Bookworm) backports main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5

    Repository-signature verification record
    Signed-object SHA-256
    43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Observed SHA-256
    9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
    Result
    match verified