Packages / Debian 13 (Trixie) / net / openssh-client

[Source: openssh]

Package: openssh-client (1:10.0p1-7+deb13u4)

Secure-Shell-(SSH)-Client für sicheren Zugriff auf entfernte Rechner

Other Packages Related to openssh-client:

  • dep: [adduser]

    add and remove users and groups

  • dep: [init-system-helpers] (>= 1.66~)

    helper tools for all init systems

  • dep: [passwd]

    change and administer password and group data

  • dep: [libc6] (>= 2.38)

    GNU C Library: Shared libraries

  • dep: [libedit2] (>= 2.11-20080614-0)

    BSD editline and history libraries

  • dep: [libfido2-1] (>= 1.8.0)

    library for generating and verifying FIDO 2.0 objects

  • dep: [libgssapi-krb5-2] (>= 1.17)

    MIT Kerberos-Laufzeitbibliotheken - krb5 GSS-API-Mechanismus

  • dep: [libselinux1] (>= 3.1~)

    SELinux runtime shared libraries

  • dep: [libssl3t64] (>= 3.0.0)

    Secure Sockets Layer-Toolkit – gemeinsam genutzte Bibliotheken

  • dep: [zlib1g] (>= 1:1.1.4)

    compression library - runtime

  • rec: [xauth]

    X authentication utility

  • sug: [keychain]

    key manager for OpenSSH

  • sug: [libpam-ssh]

    Authenticate using SSH keys

  • sug: monkeysphere

    Package not available

  • sug: [ssh-askpass]

    under X, asks user for a passphrase for ssh-add

Download openssh-client

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64963 KiB4.9 MiBlist of filesDownload
arm64927 KiB4.4 MiBlist of filesDownload

Paketdateipfade (42)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/ssh/ssh_config
  • /usr/bin/scp
  • /usr/bin/sftp
  • /usr/bin/ssh
  • /usr/bin/ssh-add
  • /usr/bin/ssh-agent
  • /usr/bin/ssh-argv0
  • /usr/bin/ssh-copy-id
  • /usr/bin/ssh-keygen
  • /usr/bin/ssh-keyscan
  • /usr/lib/openssh/ssh-keysign
  • /usr/lib/openssh/ssh-pkcs11-helper
  • /usr/lib/openssh/ssh-sk-helper
  • /usr/lib/systemd/user/graphical-session-pre.target.wants/ssh-agent.service
  • /usr/lib/systemd/user/ssh-agent.service
  • /usr/lib/systemd/user/ssh-agent.socket
  • /usr/lib/sysusers.d/openssh-client.conf
  • /usr/lib/tmpfiles.d/openssh-client.conf
  • /usr/share/apport/package-hooks/openssh-client.py
  • /usr/share/doc/openssh-client/changelog.Debian.gz
  • /usr/share/doc/openssh-client/changelog.gz
  • /usr/share/doc/openssh-client/copyright
  • /usr/share/doc/openssh-client/NEWS.Debian.gz
  • /usr/share/doc/openssh-client/OVERVIEW.gz
  • /usr/share/doc/openssh-client/README
  • /usr/share/doc/openssh-client/README.Debian.gz
  • /usr/share/doc/openssh-client/README.dns
  • /usr/share/doc/openssh-client/README.tun.gz
  • /usr/share/lintian/overrides/openssh-client
  • /usr/share/man/man1/scp.1.gz
  • /usr/share/man/man1/sftp.1.gz
  • /usr/share/man/man1/ssh.1.gz
  • /usr/share/man/man1/ssh-add.1.gz
  • /usr/share/man/man1/ssh-agent.1.gz
  • /usr/share/man/man1/ssh-argv0.1.gz
  • /usr/share/man/man1/ssh-copy-id.1.gz
  • /usr/share/man/man1/ssh-keygen.1.gz
  • /usr/share/man/man1/ssh-keyscan.1.gz
  • /usr/share/man/man5/ssh_config.5.gz
  • /usr/share/man/man8/ssh-keysign.8.gz
  • /usr/share/man/man8/ssh-pkcs11-helper.8.gz
  • /usr/share/man/man8/ssh-sk-helper.8.gz

Field source: Debian 13 (Trixie) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 13 (Trixie) im Browser testenImage mit openssh-client bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:10.0p1-7+deb13u4trixie / mainamd64Debian 13 · main · amd64967 KiB4.9 MiBpool/main/o/openssh/openssh-client_10.0p1-7+deb13u4_amd64.deb
1:10.0p1-7+deb13u4trixie / mainarm64Debian 13 · main · arm64905 KiB5.2 MiBpool/main/o/openssh/openssh-client_10.0p1-7+deb13u4_arm64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainamd64Debian 13 backports · main · amd64998 KiB4.1 MiBpool/main/o/openssh/openssh-client_10.3p1-1~bpo13+1_amd64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainarm64Debian 13 backports · main · arm64927 KiB4.4 MiBpool/main/o/openssh/openssh-client_10.3p1-1~bpo13+1_arm64.deb
1:10.0p1-7+deb13u2trixie-security / mainamd64Debian 13 security · main · amd64963 KiB4.9 MiBpool/updates/main/o/openssh/openssh-client_10.0p1-7+deb13u2_amd64.deb
1:10.0p1-7+deb13u2trixie-security / mainarm64Debian 13 security · main · arm64905 KiB5.2 MiBpool/updates/main/o/openssh/openssh-client_10.0p1-7+deb13u2_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-106589]

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForw

Low(2.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106587]

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106586]

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

[CVE-2026-73281]

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction betw

Medium(4.8)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73282]

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Medium(5.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73283]

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59995]

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59996]

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

Medium(4.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59997]

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended securi

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59998]

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59999]

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

High(7.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60000]

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthenticat

Medium(5.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60001]

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60002]

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

High(7.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-55654]

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing

Low(3.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-35414]

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma chara

Medium(4.8)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35388]

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Low(2.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35387]

OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.

Low(3.1)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35386]

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also

Low(3.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35385]

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol)

High(7.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:10.0p1-7+deb13u4 / amd64Beobachtet Sep 1, 2026sha256 8fff343654f8…0bce03b9Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 8fff343654f86c3b3266f94cd338c7b4da2e386da029327815118ea00bce03b9

Download prüfen

printf '%s %s\n' '8fff343654f86c3b3266f94cd338c7b4da2e386da029327815118ea00bce03b9' 'openssh-client_10.0p1-7+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:10.0p1-7+deb13u4 / arm64Beobachtet Sep 1, 2026sha256 e900c13c9a52…0f0bfcfbPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): e900c13c9a5267714fc2c2c1f369fe4a667c7dd4031266b1480250320f0bfcfb

Download prüfen

printf '%s %s\n' 'e900c13c9a5267714fc2c2c1f369fe4a667c7dd4031266b1480250320f0bfcfb' 'openssh-client_10.0p1-7+deb13u4_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

1:10.3p1-1~bpo13+1 / amd64Beobachtet Sep 1, 2026sha256 d5ff42811314…8ef57acdPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): d5ff4281131443b0bffaa918c12c1024fceefaf2e8be56b3244aaa6c8ef57acd

Download prüfen

printf '%s %s\n' 'd5ff4281131443b0bffaa918c12c1024fceefaf2e8be56b3244aaa6c8ef57acd' 'openssh-client_10.3p1-1~bpo13+1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main amd64

1:10.3p1-1~bpo13+1 / arm64Beobachtet Sep 1, 2026sha256 3884de740188…5196a545Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 3884de740188129c6db3e9c15b6d39bd72bf9f929c07d65bcc0f330d5196a545

Download prüfen

printf '%s %s\n' '3884de740188129c6db3e9c15b6d39bd72bf9f929c07d65bcc0f330d5196a545' 'openssh-client_10.3p1-1~bpo13+1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main arm64

1:10.0p1-7+deb13u2 / amd64Beobachtet Aug 10, 2026 – Oct 24, 2026sha256 e6bbb079e065…fbe25d18Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): e6bbb079e06539ecebd598b74f7725299ba61cebd64a2cfb09f2bab8fbe25d18

Download prüfen

printf '%s %s\n' 'e6bbb079e06539ecebd598b74f7725299ba61cebd64a2cfb09f2bab8fbe25d18' 'openssh-client_10.0p1-7+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1:10.0p1-7+deb13u2 / arm64Beobachtet Sep 1, 2026sha256 d593a6b189b1…9ebee470Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): d593a6b189b10109fce7804229e8649c11d4d1918824a0ba5ef256739ebee470

Download prüfen

printf '%s %s\n' 'd593a6b189b10109fce7804229e8649c11d4d1918824a0ba5ef256739ebee470' 'openssh-client_10.0p1-7+deb13u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

Quellen

  • Debian 13 (Trixie) backports main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Observed SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Result
    match verified
  • Debian 13 (Trixie) backports main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Observed SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Result
    match verified
  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-amd64:80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0

    Repository-signature verification record
    Signed-object SHA-256
    2dc86861c04386d3c511340d4f011a37acfd1cccdf3dbd3e054d6fe8e4118ebc
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Observed SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Result
    match verified