Packages / Debian 13 (Trixie) / net / openssh-server

[Source: openssh]

Package: openssh-server (1:10.0p1-7+deb13u4)

Secure-Shell-(SSH)-Server für sicheren Zugriff von entfernten Maschinen

Other Packages Related to openssh-server:

  • dep: [libpam-modules]

    Pluggable Authentication Modules for PAM

  • dep: [libpam-runtime]

    Runtime support for the PAM library

  • dep: [lsb-base]

    transitional package for Linux Standard Base init script functionality

  • dep: [openssh-client] (= 1:10.0p1-7+deb13u4)

    Secure-Shell-(SSH)-Client für sicheren Zugriff auf entfernte Rechner

  • dep: [openssh-sftp-server]

    Secure-Shell-(SSH)-sftp-Servermodul für SFTP-Zugriff von Remote-Rechnern

  • dep: [procps]

    /proc file system utilities

  • dep: [ucf]

    Update Configuration File(s): preserve user changes to config files

  • dep: [debconf] (>= 0.5)

    Debian configuration management system

  • dep: debconf-2.0

    Package not available

  • dep: [runit-helper] (>= 2.14.0~)

    dh-runit implementation detail

  • dep: [systemd]

    system and service manager

  • dep: [systemd-standalone-sysusers]

    standalone sysusers binary for use in non-systemd systems

  • dep: systemd-sysusers

    Package not available

  • dep: [libaudit1] (>= 1:2.2.1)

    Dynamic library for security auditing

  • dep: [libc6] (>= 2.38)

    GNU C Library: Shared libraries

  • dep: [libcom-err2] (>= 1.43.9)

    common error description library

  • dep: [libcrypt1] (>= 1:4.1.0)

    libcrypt shared library

  • dep: [libgssapi-krb5-2] (>= 1.17)

    MIT Kerberos-Laufzeitbibliotheken - krb5 GSS-API-Mechanismus

  • dep: [libkrb5-3] (>= 1.13~alpha1+dfsg)

    MIT Kerberos-Laufzeitbibliotheken

  • dep: [libpam0g] (>= 0.99.7.1)

    Pluggable Authentication Modules library

  • dep: [libselinux1] (>= 3.1~)

    SELinux runtime shared libraries

  • dep: [libssl3t64] (>= 3.0.0)

    Secure Sockets Layer-Toolkit – gemeinsam genutzte Bibliotheken

  • dep: [libwrap0] (>= 7.6-4~)

    Wietse Venema's TCP wrappers library

  • dep: [libwtmpdb0] (>= 0.13.0)

    wtmp database shared library

  • dep: [zlib1g] (>= 1:1.1.4)

    compression library - runtime

  • rec: default-logind

    Package not available

  • rec: logind

    Package not available

  • rec: [libpam-systemd]

    system and service manager - PAM module

  • rec: [ncurses-term]

    additional terminal type definitions

  • rec: [xauth]

    X authentication utility

  • sug: [molly-guard]

    protects machines from accidental shutdowns/reboots

  • sug: monkeysphere

    Package not available

  • sug: [ssh-askpass]

    under X, asks user for a passphrase for ssh-add

  • sug: [ufw]

    program for managing a Netfilter firewall

Download openssh-server

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64588 KiB3.3 MiBlist of filesDownload
arm64525 KiB3.3 MiBlist of filesDownload

Paketdateipfade (31)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/default/ssh
  • /etc/init.d/ssh
  • /etc/pam.d/sshd
  • /etc/ssh/moduli
  • /etc/sv/ssh/finish
  • /etc/sv/ssh/log/run
  • /etc/sv/ssh/.meta/installed
  • /etc/sv/ssh/run
  • /etc/ufw/applications.d/openssh-server
  • /usr/lib/openssh/sshd-auth
  • /usr/lib/openssh/sshd-session
  • /usr/lib/openssh/ssh-session-cleanup
  • /usr/lib/systemd/system/rescue-ssh.target
  • /usr/lib/systemd/system/sshd-keygen.service
  • /usr/lib/systemd/system/sshd@.service
  • /usr/lib/systemd/system/ssh.service
  • /usr/lib/systemd/system/ssh.socket
  • /usr/lib/sysusers.d/openssh-server.conf
  • /usr/lib/tmpfiles.d/openssh-server.conf
  • /usr/sbin/sshd
  • /usr/share/apport/package-hooks/openssh-server.py
  • /usr/share/doc/openssh-client/examples/ssh-session-cleanup.service
  • /usr/share/doc/openssh-server
  • /usr/share/lintian/overrides/openssh-server
  • /usr/share/man/man5/authorized_keys.5.gz
  • /usr/share/man/man5/moduli.5.gz
  • /usr/share/man/man5/sshd_config.5.gz
  • /usr/share/man/man8/sshd.8.gz
  • /usr/share/openssh/sshd_config
  • /usr/share/openssh/sshd_config.md5sum
  • /usr/share/runit/meta/ssh/installed

Field source: Debian 13 (Trixie) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 13 (Trixie) im Browser testenImage mit openssh-server bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:10.0p1-7+deb13u4trixie / mainamd64Debian 13 · main · amd64588 KiB3.3 MiBpool/main/o/openssh/openssh-server_10.0p1-7+deb13u4_amd64.deb
1:10.0p1-7+deb13u4trixie / mainarm64Debian 13 · main · arm64542 KiB3.4 MiBpool/main/o/openssh/openssh-server_10.0p1-7+deb13u4_arm64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainamd64Debian 13 backports · main · amd64574 KiB3.3 MiBpool/main/o/openssh/openssh-server_10.3p1-1~bpo13+1_amd64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainarm64Debian 13 backports · main · arm64525 KiB3.3 MiBpool/main/o/openssh/openssh-server_10.3p1-1~bpo13+1_arm64.deb
1:10.0p1-7+deb13u2trixie-security / mainamd64Debian 13 security · main · amd64588 KiB3.3 MiBpool/updates/main/o/openssh/openssh-server_10.0p1-7+deb13u2_amd64.deb
1:10.0p1-7+deb13u2trixie-security / mainarm64Debian 13 security · main · arm64540 KiB3.4 MiBpool/updates/main/o/openssh/openssh-server_10.0p1-7+deb13u2_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-106589]

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForw

Low(2.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106587]

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106586]

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

[CVE-2026-73281]

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction betw

Medium(4.8)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73282]

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Medium(5.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73283]

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59995]

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59996]

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

Medium(4.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59997]

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended securi

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59998]

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59999]

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

High(7.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60000]

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthenticat

Medium(5.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60001]

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60002]

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

High(7.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-55654]

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing

Low(3.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-35414]

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma chara

Medium(4.8)Unbekannt

Die Paketzuordnung läuft. Beobachtet:

Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35388]

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Low(2.5)Unbekannt

Die Paketzuordnung läuft. Beobachtet:

Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35387]

OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.

Low(3.1)Unbekannt

Die Paketzuordnung läuft. Beobachtet:

Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35386]

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also

Low(3.6)Unbekannt

Die Paketzuordnung läuft. Beobachtet:

Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35385]

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol)

High(7.5)Unbekannt

Die Paketzuordnung läuft. Beobachtet:

Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:10.0p1-7+deb13u4 / amd64Beobachtet Sep 1, 2026sha256 b4a02524fd2b…cdd37f9dPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): b4a02524fd2be375624d917ee8102a16567e9e8dd786b41c35e22360cdd37f9d

Download prüfen

printf '%s %s\n' 'b4a02524fd2be375624d917ee8102a16567e9e8dd786b41c35e22360cdd37f9d' 'openssh-server_10.0p1-7+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:10.0p1-7+deb13u4 / arm64Beobachtet Sep 1, 2026sha256 6da10564d374…fc45e41dPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 6da10564d3747e5f8fcca9595e154d863fdef786c3384ccd24e518c1fc45e41d

Download prüfen

printf '%s %s\n' '6da10564d3747e5f8fcca9595e154d863fdef786c3384ccd24e518c1fc45e41d' 'openssh-server_10.0p1-7+deb13u4_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

1:10.3p1-1~bpo13+1 / amd64Beobachtet Sep 1, 2026sha256 bd3b61b7bddc…7bcf7e87Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): bd3b61b7bddcbae49923d7cebfff6922c6387cd58a274d40c4900b887bcf7e87

Download prüfen

printf '%s %s\n' 'bd3b61b7bddcbae49923d7cebfff6922c6387cd58a274d40c4900b887bcf7e87' 'openssh-server_10.3p1-1~bpo13+1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main amd64

1:10.3p1-1~bpo13+1 / arm64Beobachtet Sep 1, 2026sha256 c0d7f487d9f0…e9c4ab17Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): c0d7f487d9f00228d34444757915456b6802a53c61cb35f70f178de5e9c4ab17

Download prüfen

printf '%s %s\n' 'c0d7f487d9f00228d34444757915456b6802a53c61cb35f70f178de5e9c4ab17' 'openssh-server_10.3p1-1~bpo13+1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main arm64

1:10.0p1-7+deb13u2 / amd64Beobachtet Aug 10, 2026 – Oct 24, 2026sha256 46e9d73149ba…798f7b78Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 46e9d73149ba34744d17f5859e8e7f0277f3f7f2daf078dd4f477dd1798f7b78

Download prüfen

printf '%s %s\n' '46e9d73149ba34744d17f5859e8e7f0277f3f7f2daf078dd4f477dd1798f7b78' 'openssh-server_10.0p1-7+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1:10.0p1-7+deb13u2 / arm64Beobachtet Sep 1, 2026sha256 3f27c087fe6c…ede23045Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 3f27c087fe6c28e40a0bbc096f5289cd4afee34a9a3f4746e09a954dede23045

Download prüfen

printf '%s %s\n' '3f27c087fe6c28e40a0bbc096f5289cd4afee34a9a3f4746e09a954dede23045' 'openssh-server_10.0p1-7+deb13u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

Quellen

  • Debian 13 (Trixie) backports main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Observed SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Result
    match verified
  • Debian 13 (Trixie) backports main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Observed SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Result
    match verified
  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-amd64:c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb

    Repository-signature verification record
    Signed-object SHA-256
    198287b2fa5f7e3bc836fc6ddb4fe339b90a2fe43dc3f2b57c002a66309e49d5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Observed SHA-256
    c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
    Result
    match verified