Moderate Photon OS Security Update - PHSA-2025-5.0-0475

Updates of 'openssh' packages of Photon OS have been released...

PT-2025-7169

Name of the Vulnerable Software and Affected Versions OpenSSH versions 9.5p1 through 9.9p1 Description The issue is related to an uncontrolled consumption of resources in OpenSSH, which can be exploited by a remote attacker to cause a denial of service. This can be achieved through memory...

CVE-2025-26465: Detection of Error Condition Without Action

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

OpenSSH 安全漏洞

OpenSSH OpenBSD Secure Shell is a set of connection tools for secure access to remote computers from the Canadian OpenBSD Project Group. The tool is an open source implementation of the SSH protocol that supports encryption of all transmissions, effectively blocking eavesdropping, connection...

OPENSUSE-SU-2025:14820-1 openssh-9.9p2-1.1 on GA media

These are all security issues fixed in the openssh-9.9p2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-26465 affecting package openssh for versions less than 9.8p1-3

CVE-2025-26465 affecting package openssh for versions less than 9.8p1-3. A patched version of the package is available...

CVE-2025-26466 affecting package openssh for versions less than 9.8p1-3

CVE-2025-26466 affecting package openssh for versions less than 9.8p1-3. A patched version of the package is available...

OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle

OpenSSH versions 6.8p1 to 9.9p1 contain a logic error that allow an on-path attacker a.k.a man-in-the-middle to impersonate any server when the VerifyHostKeyDNS option is enabled. This option is off by default. OpenSSH versions 9.5p1 to 9.9p1 are vulnerable to a memory/CPU denial of service relat...

OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle Vulnerability

OpenSSH versions 6.8p1 to 9.9p1 contain a logic error that allow an on-path attacker a.k.a man-in-the-middle to impersonate any server when the VerifyHostKeyDNS option is enabled. This option is off by default. OpenSSH versions 9.5p1 to 9.9p1 are vulnerable to a memory/CPU denial of service relat...

DSA-5868-1 openssh - security update

Bulletin has no description...

Moderate Photon OS Security Update - PHSA-2025-3.0-0817

Updates of 'openssh' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-4.0-0757

Updates of 'openssh' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2025-5.0-91-0475

Updates of 'openssh' packages of Photon OS have been released...

UBUNTU-CVE-2025-26466

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to ...

CVE-2025-26466

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to ...

CVE-2025-26465

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

UBUNTU-CVE-2025-26465

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

DLA-4057-1 openssh - security update

Bulletin has no description...

GLSA-202502-01 : OpenSSH: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202502-01 OpenSSH: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Debian dsa-5868 : openssh-client - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5868 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5868-1 [email protected] https://www.debian.org/security/...