Search CVE reports
1 – 10 of 125 results
authorized_keys restrict does not apply to tunnel forwarding
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Rejected reason: CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Not affected | Not affected | Not affected | Not affected | Not affected |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Not affected | Not affected | Not affected | Not affected | Not affected |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Rejected reason: CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Not affected | Not affected | Not affected | Not affected | Not affected |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Not affected | Not affected | Not affected | Not affected | Not affected |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Rejected reason: CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Not affected | Not affected | Not affected | Not affected | Not affected |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Some fixes available 5 of 15
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Some fixes available 5 of 15
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Some fixes available 5 of 15
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |
Some fixes available 5 of 15
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.
3 affected packages
openssh, openssh-ssh1, openssh-gssapi
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openssh | Fixed | Fixed | Fixed | Needs evaluation | Needs evaluation |
| openssh-ssh1 | Ignored | Ignored | Ignored | Ignored | Ignored |
| openssh-gssapi | Not in release | Not in release | Not in release | — | — |