K000163053: OpenSSH vulnerability CVE-2026-35387

Security Advisory Description OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms. CVE-2026-35387 Impact There is no impact; F5 products are not affected b...

K000163042: OpenSSH vulnerability CVE-2026-35385

Security Advisory Description In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O legacy scp protocol and without -p preserve mode. CVE-2026-35385 Impact There is no impac...

ROOT-OS-DEBIAN-11-CVE-2026-59998 CVE-2026-59998 in openssh - Patched by Root

Root has patched CVE-2026-59998 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59997 CVE-2026-59997 in openssh - Patched by Root

Root has patched CVE-2026-59997 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59995 CVE-2026-59995 in openssh - Patched by Root

Root has patched CVE-2026-59995 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-60000 CVE-2026-60000 in openssh - Patched by Root

Root has patched CVE-2026-60000 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-51767 CVE-2023-51767 in openssh - Patched by Root

Root has patched CVE-2023-51767 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59999 CVE-2026-59999 in openssh - Patched by Root

Root has patched CVE-2026-59999 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-60001 CVE-2026-60001 in openssh - Patched by Root

Root has patched CVE-2026-60001 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-60002 CVE-2026-60002 in openssh - Patched by Root

Root has patched CVE-2026-60002 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59996 CVE-2026-59996 in openssh - Patched by Root

Root has patched CVE-2026-59996 in the openssh package for Root:Debian:11. Multiple fixed versions available...

SUSE-SU-2026:23249-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2025-32728: fix logic error in DisableForwarding option bsc1241012. - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables bsc1259642. - CVE-2026-35385: a file downloaded by scp may be installed setuid ...

[SECURITY] Fedora 44 Update: openssh-10.2p1-14.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Fedora 44 : openssh (2026-752aa3ff05)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-752aa3ff05 advisory. Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded Tenable has extracted the preceding description block directly from the Fedora...

OESA-2026-3432 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication.CVE-2026-60000 sshd in...

OESA-2026-3431 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication.CVE-2026-60000 sshd in...

OESA-2026-3430 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication.CVE-2026-60000 sshd in...

OESA-2026-3429 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication.CVE-2026-60000 sshd in...

OESA-2026-3428 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.CVE-2026-59995 scp in OpenSSH before 10.4 may place a file in the...

CentOS 9 : openssh-9.9p1-12.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-12.el9 build changelog. - In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. CVE-2026-59999...