Packages / openSUSE Tumbleweed / Source / Productivity/Networking/SSH / openssh

Source Package: openssh (10.5p1-1.1)

Secure Shell Client and Server (Remote Login Program)

The following binary packages are built from this source package:

openssh
Secure Shell Client and Server (Remote Login Program)
openssh-cavs
OpenSSH FIPS crypto module CAVS tests
openssh-clients
SSH (Secure Shell) client applications
openssh-common
SSH (Secure Shell) common files
openssh-helpers
OpenSSH AuthorizedKeysCommand helpers
openssh-server
SSH (Secure Shell) server
openssh-server-config-rootlogin
Config to permit root logins to sshd

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVE	Schweregrad	Betroffene Versionen
[CVE-2026-35385] In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol)	High(7.5)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 24, 2026, 5:10:19 AM UTC Details (7) `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-4.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-4.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-4.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Behoben · Behoben: `10.3p1-4.1` nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-4.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-4.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-4.1` Version impact unknown nvd · openssh · opensuse · tumbleweed
[CVE-2026-3497] Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH up	High(8.2)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 24, 2026, 6:34:13 AM UTC Details (7) `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-6.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-6.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-6.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Behoben · Behoben: `10.3p1-6.1` nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-6.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-6.1` Version impact unknown nvd · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `10.3p1-6.1` Version impact unknown nvd · openssh · opensuse · tumbleweed
[CVE-2022-2274] openssl: CVE-2022-2274	Critical(9.8)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 23, 2026, 6:24:22 PM UTC Details (7) `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.3p1-1.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.3p1-1.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.3p1-1.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Behoben · Behoben: `9.3p1-1.1` dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.3p1-1.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.3p1-1.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.3p1-1.1` Version impact unknown dsa · openssh · opensuse · tumbleweed
[CVE-2021-28041] openssh: CVE-2021-28041	High(7.1)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 23, 2026, 5:55:28 PM UTC Details (7) `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.6p1-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.6p1-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.6p1-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Behoben · Behoben: `9.6p1-3.1` dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.6p1-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.6p1-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `9.6p1-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed
[CVE-2015-8325] openssh: CVE-2015-8325	High(7.8)	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 23, 2026, 5:16:51 PM UTC Details (7) `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `7.2p2-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `7.2p2-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `7.2p2-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Behoben · Behoben: `7.2p2-3.1` dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `7.2p2-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `7.2p2-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `7.2p2-3.1` Version impact unknown dsa · openssh · opensuse · tumbleweed
[CVE-2006-0225] openssh: CVE-2006-0225	Medium	Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 23, 2026, 5:02:49 PM UTC Details (7) `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `8.4p1-7.4` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `8.4p1-7.4` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `8.4p1-7.4` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Behoben · Behoben: `8.4p1-7.4` dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `8.4p1-7.4` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `8.4p1-7.4` Version impact unknown dsa · openssh · opensuse · tumbleweed `10.5p1-1.1` · x86_64 · tumbleweed Unbekannt · Behoben: `8.4p1-7.4` Version impact unknown dsa · openssh · opensuse · tumbleweed

Zuletzt synchronisiert: Oct 24, 2026, 9:48:01 AM UTC

[CVE-Katalog]

Quellen

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable