Packages / Debian 13 (Trixie) / gnome / ssh-askpass-gnome

[Source: openssh]

Package: ssh-askpass-gnome (1:10.0p1-7+deb13u4)

interaktives X-Programm zur Abfrage einer Passphrase für ssh-add

Other Packages Related to ssh-askpass-gnome:

  • dep: [openssh-client]

    Secure-Shell-(SSH)-Client für sicheren Zugriff auf entfernte Rechner

  • dep: [ssh] (>= 1:1.2pre7-4)

    Secure-Shell-Client und -Server (Metapaket)

  • dep: [libc6] (>= 2.34)

    GNU C Library: Shared libraries

  • dep: [libglib2.0-0t64] (>= 2.12.0)

    GLib library of C routines

  • dep: [libgtk-3-0t64] (>= 3.19.12)

    GTK graphical user interface library

Download ssh-askpass-gnome

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64153 KiB190 KiBlist of filesDownload
arm64195 KiB280 KiBlist of filesDownload

Paketdateipfade (8)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/openssh/gnome-ssh-askpass
  • /usr/share/doc/ssh-askpass-gnome/changelog.Debian.gz
  • /usr/share/doc/ssh-askpass-gnome/changelog.gz
  • /usr/share/doc/ssh-askpass-gnome/copyright
  • /usr/share/doc/ssh-askpass-gnome/examples/ssh-askpass-gnome.desktop
  • /usr/share/doc/ssh-askpass-gnome/NEWS.Debian.gz
  • /usr/share/man/man1/gnome-ssh-askpass.1.gz
  • /usr/share/pixmaps/ssh-askpass-gnome.png

Field source: Debian 13 (Trixie) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 13 (Trixie) im Browser testenImage mit ssh-askpass-gnome bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:10.0p1-7+deb13u4trixie / mainamd64Debian 13 · main · amd64154 KiB191 KiBpool/main/o/openssh/ssh-askpass-gnome_10.0p1-7+deb13u4_amd64.deb
1:10.0p1-7+deb13u4trixie / mainarm64Debian 13 · main · arm64154 KiB239 KiBpool/main/o/openssh/ssh-askpass-gnome_10.0p1-7+deb13u4_arm64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainamd64Debian 13 backports · main · amd64195 KiB232 KiBpool/main/o/openssh/ssh-askpass-gnome_10.3p1-1~bpo13+1_amd64.deb
1:10.3p1-1~bpo13+1trixie-backports / mainarm64Debian 13 backports · main · arm64195 KiB280 KiBpool/main/o/openssh/ssh-askpass-gnome_10.3p1-1~bpo13+1_arm64.deb
1:10.0p1-7+deb13u2trixie-security / mainamd64Debian 13 security · main · amd64153 KiB190 KiBpool/updates/main/o/openssh/ssh-askpass-gnome_10.0p1-7+deb13u2_amd64.deb
1:10.0p1-7+deb13u2trixie-security / mainarm64Debian 13 security · main · arm64153 KiB238 KiBpool/updates/main/o/openssh/ssh-askpass-gnome_10.0p1-7+deb13u2_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-106589]

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForw

Low(2.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106587]

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-106586]

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20

    nvd · openssh

[CVE-2026-73281]

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction betw

Medium(4.8)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73282]

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Medium(5.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-73283]

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59995]

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59996]

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

Medium(4.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59997]

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended securi

Medium(5.4)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59998]

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-59999]

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

High(7.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60000]

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthenticat

Medium(5.9)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60001]

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

Medium(6.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-60002]

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

High(7.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-55654]

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing

Low(3.7)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen

    nvd · openssh · debian · 13

[CVE-2026-35414]

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma chara

Medium(4.8)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35388]

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Low(2.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35387]

OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.

Low(3.1)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35386]

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also

Low(3.6)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[CVE-2026-35385]

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol)

High(7.5)Betroffen
Details (6)

  • 1:10.0p1-7+deb13u4 · amd64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u4 · arm64 · trixie

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · amd64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.3p1-1~bpo13+1 · arm64 · trixie-backports

    Behoben · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · amd64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

  • 1:10.0p1-7+deb13u2 · arm64 · trixie-security

    Betroffen · Behoben: 1:10.0p1-7+deb13u3

    nvd · openssh · debian · 13

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:10.0p1-7+deb13u4 / amd64Beobachtet Sep 1, 2026sha256 703969c7e2ee…ae154b1cPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 703969c7e2eedd72b7686110d629b144b0bebf0d8bc1d70e8ba9406bae154b1c

Download prüfen

printf '%s %s\n' '703969c7e2eedd72b7686110d629b144b0bebf0d8bc1d70e8ba9406bae154b1c' 'ssh-askpass-gnome_10.0p1-7+deb13u4_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:10.0p1-7+deb13u4 / arm64Beobachtet Sep 1, 2026sha256 ad977b25ea11…c353d63ePrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): ad977b25ea1107fed192d611095b59dcc78a76bdd653a5efdbb49651c353d63e

Download prüfen

printf '%s %s\n' 'ad977b25ea1107fed192d611095b59dcc78a76bdd653a5efdbb49651c353d63e' 'ssh-askpass-gnome_10.0p1-7+deb13u4_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

1:10.3p1-1~bpo13+1 / amd64Beobachtet Sep 1, 2026sha256 db8b7146edf4…a5fce226Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): db8b7146edf433d08f2dc9f37c0bb31a15c7b6e9a1993efe8cd1be50a5fce226

Download prüfen

printf '%s %s\n' 'db8b7146edf433d08f2dc9f37c0bb31a15c7b6e9a1993efe8cd1be50a5fce226' 'ssh-askpass-gnome_10.3p1-1~bpo13+1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main amd64

1:10.3p1-1~bpo13+1 / arm64Beobachtet Sep 1, 2026sha256 8ed3074e1ea4…eada7cf9Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 8ed3074e1ea41c9408a1c40815ca306085bd6d6c382799db869b8b0beada7cf9

Download prüfen

printf '%s %s\n' '8ed3074e1ea41c9408a1c40815ca306085bd6d6c382799db869b8b0beada7cf9' 'ssh-askpass-gnome_10.3p1-1~bpo13+1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main arm64

1:10.0p1-7+deb13u2 / amd64Beobachtet Aug 10, 2026 – Oct 24, 2026sha256 a3c58732a6c0…b95119a9Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): a3c58732a6c0e44b1a75d2c14371c9830f2e26e13ac92aeab44ba0d1b95119a9

Download prüfen

printf '%s %s\n' 'a3c58732a6c0e44b1a75d2c14371c9830f2e26e13ac92aeab44ba0d1b95119a9' 'ssh-askpass-gnome_10.0p1-7+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

1:10.0p1-7+deb13u2 / arm64Beobachtet Sep 1, 2026sha256 a0af2c453a55…2d991ec4Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): a0af2c453a554c718616a071bfa7e344cf3074cc20bb71a12c2b62172d991ec4

Download prüfen

printf '%s %s\n' 'a0af2c453a554c718616a071bfa7e344cf3074cc20bb71a12c2b62172d991ec4' 'ssh-askpass-gnome_10.0p1-7+deb13u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

Quellen

  • Debian 13 (Trixie) backports main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Observed SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Result
    match verified
  • Debian 13 (Trixie) backports main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Observed SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Result
    match verified
  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-amd64:80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0

    Repository-signature verification record
    Signed-object SHA-256
    2dc86861c04386d3c511340d4f011a37acfd1cccdf3dbd3e054d6fe8e4118ebc
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Observed SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Result
    match verified