[Git][security-tracker-team/security-tracker][master] Openssh/bookworm

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
74aeea59 by Bastien Roucariès at 2026-10-09T23:47:24+02:00
Openssh/bookworm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2826,18 +2826,21 @@ CVE-2026-106588 (In sshd in OpenSSH through 10.6, use of the macOS 27 (or later)
 CVE-2026-106587 (In sshd in OpenSSH before 10.6, the value "none" for a configuration o ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6
 CVE-2026-106586 (In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_ke ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6
 CVE-2026-106585 (In sshd and ssh in OpenSSH before 10.6, there is no check for whether  ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6
@@ -2849,30 +2852,35 @@ CVE-2026-106584 (In ssh-keygen in OpenSSH before 10.6, certificates could have i
 CVE-2026-106583 (In ssh in OpenSSH before 10.6, a $ or \ character can occur in a comma ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6
 CVE-2026-106582 (In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can b ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6
 CVE-2026-106555 (In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication st ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6
 CVE-2026-106553 (In sshd in OpenSSH before 10.6, credentials can incorrectly persist af ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6
 CVE-2026-106552 (In sftp in OpenSSH before 10.6, a server can trigger directory travers ...)
 	- openssh 1:10.6p1-1
 	[trixie] - openssh <no-dsa> (Minor issue)
+	[bookworm] - openssh <postponed> (Minor issue)
 	- openssh-gssapi 1:10.6p1-1
 	[trixie] - openssh-gssapi <no-dsa> (Minor issue)
 	NOTE: https://www.openssh.org/releasenotes.html#10.6



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74aeea59bb035ce0b2346565a37467459602a0fc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/74aeea59bb035ce0b2346565a37467459602a0fc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/a46a43e7/attachment.htm>