Packages / Debian 13 (Trixie) / net / openssh-sftp-server

[Source: openssh]

Package: openssh-sftp-server (1:10.0p1-7+deb13u4)

Secure-Shell-(SSH)-sftp-Servermodul für SFTP-Zugriff von Remote-Rechnern

Other Packages Related to openssh-sftp-server:

  • dep: [openssh-client] (= 1:10.0p1-7+deb13u4)

    Secure-Shell-(SSH)-Client für sicheren Zugriff auf entfernte Rechner

  • dep: [libc6] (>= 2.38)

    GNU C Library: Shared libraries

  • rec: [openssh-server]

    Secure-Shell-(SSH)-Server für sicheren Zugriff von entfernten Maschinen

  • rec: ssh-server

    Package not available

  • enh: [openssh-server]

    Secure-Shell-(SSH)-Server für sicheren Zugriff von entfernten Maschinen

  • enh: ssh-server

    Package not available

Download openssh-sftp-server

ArchitecturePackage sizeInstalled sizeFilesPackage
amd6464 KiB173 KiBlist of filesDownload
arm6460 KiB209 KiBlist of filesDownload

Paketdateipfade (4)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/openssh/sftp-server
  • /usr/lib/sftp-server
  • /usr/share/doc/openssh-sftp-server
  • /usr/share/man/man8/sftp-server.8.gz

Field source: Debian 13 (Trixie) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 13 (Trixie) im Browser testenImage mit openssh-sftp-server bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:10.0p1-7+deb13u4trixie / mainamd64Debian 13 · main · amd6464 KiB173 KiBpool/main/o/openssh/openssh-sftp-server_10.0p1-7+deb13u4_amd64.deb
1:10.0p1-7+deb13u4trixie / mainarm64Debian 13 · main · arm6459 KiB209 KiBpool/main/o/openssh/openssh-sftp-server_10.0p1-7+deb13u4_arm64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainamd64Debian 13 backports · main · amd6465 KiB181 KiBpool/main/o/openssh/openssh-sftp-server_10.3p1-1~bpo13+1_amd64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainarm64Debian 13 backports · main · arm6460 KiB209 KiBpool/main/o/openssh/openssh-sftp-server_10.3p1-1~bpo13+1_arm64.deb
1:10.0p1-7+deb13u2trixie-security / mainamd64Debian 13 security · main · amd6464 KiB173 KiBpool/updates/main/o/openssh/openssh-sftp-server_10.0p1-7+deb13u2_amd64.deb
1:10.0p1-7+deb13u2trixie-security / mainarm64Debian 13 security · main · arm6459 KiB209 KiBpool/updates/main/o/openssh/openssh-sftp-server_10.0p1-7+deb13u2_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-106589]

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForw

Low(2.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106587]

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106586]

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

[CVE-2026-73281]

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction betw

Medium(4.8)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73282]

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Medium(5.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73283]

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59995]

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59996]

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

Medium(4.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59997]

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended securi

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59998]

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59999]

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

High(7.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60000]

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthenticat

Medium(5.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60001]

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60002]

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

High(7.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-55654]

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing

Low(3.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-35414]

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma chara

Medium(4.8)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35388]

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Low(2.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35387]

OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.

Low(3.1)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35386]

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also

Low(3.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35385]

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol)

High(7.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:10.0p1-7+deb13u4 / amd64Beobachtet Sep 1, 2026sha256 28a82485438f…d452e542Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 28a82485438fafc8d6a7552ab61cac827338c16f39e3790d6ebcc146d452e542

Download prüfen

printf '%s %s\n' '28a82485438fafc8d6a7552ab61cac827338c16f39e3790d6ebcc146d452e542' 'openssh-sftp-server_10.0p1-7+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:10.0p1-7+deb13u4 / arm64Beobachtet Sep 1, 2026sha256 c949831340f9…36476e05Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): c949831340f9af9e70a6dab740fc9cdff6dd0b249bf9d7d640f6486036476e05

Download prüfen

printf '%s %s\n' 'c949831340f9af9e70a6dab740fc9cdff6dd0b249bf9d7d640f6486036476e05' 'openssh-sftp-server_10.0p1-7+deb13u4_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

1:10.3p1-1~bpo13+1 / amd64Beobachtet Sep 1, 2026sha256 20e172201c73…b45d1bfdPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 20e172201c7338b750522b4db454feb3a3a62b025d5cc1ae0971c259b45d1bfd

Download prüfen

printf '%s %s\n' '20e172201c7338b750522b4db454feb3a3a62b025d5cc1ae0971c259b45d1bfd' 'openssh-sftp-server_10.3p1-1~bpo13+1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main amd64

1:10.3p1-1~bpo13+1 / arm64Beobachtet Sep 1, 2026sha256 289d32279585…78ee07a0Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 289d32279585bd4be868491fd5fbeab4d68780ab381dfba410f6bf5c78ee07a0

Download prüfen

printf '%s %s\n' '289d32279585bd4be868491fd5fbeab4d68780ab381dfba410f6bf5c78ee07a0' 'openssh-sftp-server_10.3p1-1~bpo13+1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main arm64

1:10.0p1-7+deb13u2 / amd64Beobachtet Aug 10, 2026 – Oct 24, 2026sha256 ceafc87f74e7…4317d1f4Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): ceafc87f74e71d2b8346f7715064bfee197bdf2848e0a425e370e5cc4317d1f4

Download prüfen

printf '%s %s\n' 'ceafc87f74e71d2b8346f7715064bfee197bdf2848e0a425e370e5cc4317d1f4' 'openssh-sftp-server_10.0p1-7+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1:10.0p1-7+deb13u2 / arm64Beobachtet Sep 1, 2026sha256 92456a2b0a0d…d205d40dPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 92456a2b0a0d71168e016c4d01fad2758c11d40ba941ebec7c084d89d205d40d

Download prüfen

printf '%s %s\n' '92456a2b0a0d71168e016c4d01fad2758c11d40ba941ebec7c084d89d205d40d' 'openssh-sftp-server_10.0p1-7+deb13u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

Quellen

  • Debian 13 (Trixie) backports main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Observed SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Result
    match verified
  • Debian 13 (Trixie) backports main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Observed SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Result
    match verified
  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-amd64:80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0

    Repository-signature verification record
    Signed-object SHA-256
    2dc86861c04386d3c511340d4f011a37acfd1cccdf3dbd3e054d6fe8e4118ebc
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Observed SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Result
    match verified