[Git][security-tracker-team/security-tracker][master] Add new opessh issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a3b6db0 by Salvatore Bonaccorso at 2026-07-08T09:25:54+02:00
Add new opessh issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,25 +19,33 @@ CVE-2026-7380 (Improper neutralization of Script-Related HTML tags in a web page
 CVE-2026-6101 (The AMP for WP \u2013 Accelerated Mobile Pages plugin for WordPress is ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-60002 (ssh in OpenSSH before 10.4 can have a use-after-free when a server cha ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-60001 (sshd in OpenSSH before 10.4 does not always honor the minimum authenti ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-60000 (sshd in OpenSSH before 10.4 allows remote attackers to cause a denial  ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-5799 (Authorization bypass through User-Controlled key vulnerability in Idvl ...)
 	TODO: check
 CVE-2026-5730 (Authorization bypass through User-Controlled key vulnerability in Idvl ...)
 	TODO: check
 CVE-2026-59999 (In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to  ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-59998 (sshd in OpenSSH before 10.4 has an undocumented security-relevant beha ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-59997 (internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-59996 (scp in OpenSSH before 10.4 may place a file in the parent directory of ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-59995 (sftp in OpenSSH before 10.4 does not properly constrain the location o ...)
-	TODO: check
+	- openssh 1:10.4p1-1
+	NOTE: https://www.openssh.org/releasenotes.html#10.4p1
 CVE-2026-59800 (9Router before 0.4.44 contains an OS command injection vulnerability i ...)
 	TODO: check
 CVE-2026-59709 (Ghostfolio's PUT /api/v1/portfolio/holding/:dataSource/:symbol/tags en ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a3b6db0cc1d59399fb4afc42d2cdfa459e22357

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6a3b6db0cc1d59399fb4afc42d2cdfa459e22357
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260708/5f17b574/attachment-0001.htm>