18787 matches found
DEBIAN-CVE-2026-106582
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings...
AZL-106694 CVE-2026-106582 affecting package openssh 9.8p1-10
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings...
AZL-106703 CVE-2026-106584 affecting package openssh 9.8p1-10
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...
DEBIAN-CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...
AZL-106691 CVE-2026-106585 affecting package openssh 9.8p1-10
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...
DEBIAN-CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...
CVE-2026-106582
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings...
CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...
EUVD-2026-94014
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...
CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...
CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data...
CVE-2026-106585
The OpenSSH sshd and ssh components in versions before 10.6 are vulnerable to a data amplification issue. The root cause is a lack of checks to determine if the maximum packet length is exceeded when decompressing highly compressed data . This vulnerability could lead to impacts on integrity and ...
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...
EUVD-2026-94011
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...
CVE-2026-106584
In OpenSSH versions prior to 10.6 , the ssh-keygen utility may produce certificates with incorrect expiration times due to improper handling of Daylight Saving Time . This issue is specifically noted to have a slightly more severe effect on users in certain Antarctic locations . No specific explo...
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations...
CVE-2026-106582
Versions of OpenSSH before 10.6 are vulnerable in the sshd and ssh components due to the ability to use an LZ77 dictionary coder , despite findings in arXiv 2609.07709 "Crossing the Streams" indicating this is contraindicated. This issue is classified under CWE-514 (Covert Channel). The CVSS 3.1 ...