{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "openbsd openssh: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/openbsd--openssh/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/openbsd--openssh/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106583/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106583/",
   "title": "CVE-2026-106583 · openbsd openssh · disclosed",
   "content_text": "In ssh in OpenSSH before 10.6, a $ or \\ character can occur in a command-line username, leading to injection.",
   "date_published": "2026-10-06T23:42:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106583/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106583/",
   "title": "CVE-2026-106583 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T23:42:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106583/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106583/",
   "title": "CVE-2026-106583 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.2.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.2.hum1, openssh-askpass 0:10.5p1-1.2.hum1, openssh-clients 0:10.5p1-1.2.hum1, openssh-keycat 0:10.5p1-1.2.hum1, openssh-keysign 0:10.5p1-1.2.hum1, openssh-server 0:10.5p1-1.2.hum1, openssh-sk-dummy 0:10.5p1-1.2.hum1.",
   "date_published": "2026-10-06T23:42:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106583/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106583/",
   "title": "CVE-2026-106583 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T23:42:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106583/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106583/",
   "title": "CVE-2026-106583 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T23:42:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106583/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106583/",
   "title": "CVE-2026-106583 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T23:42:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106583/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106583/",
   "title": "CVE-2026-106583 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T23:42:14Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106589/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106589/",
   "title": "CVE-2026-106589 · openbsd openssh · disclosed",
   "content_text": "In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.",
   "date_published": "2026-10-06T21:21:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106588/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106588/",
   "title": "CVE-2026-106588 · openbsd openssh · disclosed",
   "content_text": "In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.",
   "date_published": "2026-10-06T21:10:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106587/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106587/",
   "title": "CVE-2026-106587 · openbsd openssh · disclosed",
   "content_text": "In sshd in OpenSSH before 10.6, the value \"none\" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.",
   "date_published": "2026-10-06T21:01:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106587/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106587/",
   "title": "CVE-2026-106587 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T21:01:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106587/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106587/",
   "title": "CVE-2026-106587 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.2.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.2.hum1, openssh-askpass 0:10.5p1-1.2.hum1, openssh-clients 0:10.5p1-1.2.hum1, openssh-keycat 0:10.5p1-1.2.hum1, openssh-keysign 0:10.5p1-1.2.hum1, openssh-server 0:10.5p1-1.2.hum1, openssh-sk-dummy 0:10.5p1-1.2.hum1.",
   "date_published": "2026-10-06T21:01:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106587/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106587/",
   "title": "CVE-2026-106587 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T21:01:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106587/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106587/",
   "title": "CVE-2026-106587 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T21:01:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106587/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106587/",
   "title": "CVE-2026-106587 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T21:01:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106587/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106587/",
   "title": "CVE-2026-106587 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T21:01:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106586/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106586/",
   "title": "CVE-2026-106586 · openbsd openssh · disclosed",
   "content_text": "In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.",
   "date_published": "2026-10-06T20:57:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106586/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106586/",
   "title": "CVE-2026-106586 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T20:57:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106586/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106586/",
   "title": "CVE-2026-106586 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.2.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.2.hum1, openssh-askpass 0:10.5p1-1.2.hum1, openssh-clients 0:10.5p1-1.2.hum1, openssh-keycat 0:10.5p1-1.2.hum1, openssh-keysign 0:10.5p1-1.2.hum1, openssh-server 0:10.5p1-1.2.hum1, openssh-sk-dummy 0:10.5p1-1.2.hum1.",
   "date_published": "2026-10-06T20:57:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106586/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106586/",
   "title": "CVE-2026-106586 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T20:57:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106586/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106586/",
   "title": "CVE-2026-106586 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T20:57:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106586/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106586/",
   "title": "CVE-2026-106586 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T20:57:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106586/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106586/",
   "title": "CVE-2026-106586 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T20:57:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106585/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106585/",
   "title": "CVE-2026-106585 · openbsd openssh · disclosed",
   "content_text": "In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.",
   "date_published": "2026-10-06T20:52:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106585/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106585/",
   "title": "CVE-2026-106585 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T20:52:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106585/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106585/",
   "title": "CVE-2026-106585 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.2.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.2.hum1, openssh-askpass 0:10.5p1-1.2.hum1, openssh-clients 0:10.5p1-1.2.hum1, openssh-keycat 0:10.5p1-1.2.hum1, openssh-keysign 0:10.5p1-1.2.hum1, openssh-server 0:10.5p1-1.2.hum1, openssh-sk-dummy 0:10.5p1-1.2.hum1.",
   "date_published": "2026-10-06T20:52:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106585/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106585/",
   "title": "CVE-2026-106585 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T20:52:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106585/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106585/",
   "title": "CVE-2026-106585 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T20:52:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106585/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106585/",
   "title": "CVE-2026-106585 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T20:52:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106585/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106585/",
   "title": "CVE-2026-106585 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T20:52:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106584/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106584/",
   "title": "CVE-2026-106584 · openbsd openssh · disclosed",
   "content_text": "In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.",
   "date_published": "2026-10-06T20:47:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106584/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106584/",
   "title": "CVE-2026-106584 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T20:47:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106584/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106584/",
   "title": "CVE-2026-106584 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.2.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.2.hum1, openssh-askpass 0:10.5p1-1.2.hum1, openssh-clients 0:10.5p1-1.2.hum1, openssh-keycat 0:10.5p1-1.2.hum1, openssh-keysign 0:10.5p1-1.2.hum1, openssh-server 0:10.5p1-1.2.hum1, openssh-sk-dummy 0:10.5p1-1.2.hum1.",
   "date_published": "2026-10-06T20:47:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106584/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106584/",
   "title": "CVE-2026-106584 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T20:47:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106584/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106584/",
   "title": "CVE-2026-106584 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T20:47:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106584/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106584/",
   "title": "CVE-2026-106584 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T20:47:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106584/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106584/",
   "title": "CVE-2026-106584 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T20:47:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106582/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106582/",
   "title": "CVE-2026-106582 · openbsd openssh · disclosed",
   "content_text": "In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 \"Crossing the Streams\" findings.",
   "date_published": "2026-10-06T20:35:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106582/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106582/",
   "title": "CVE-2026-106582 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T20:35:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106582/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106582/",
   "title": "CVE-2026-106582 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.2.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.2.hum1, openssh-askpass 0:10.5p1-1.2.hum1, openssh-clients 0:10.5p1-1.2.hum1, openssh-keycat 0:10.5p1-1.2.hum1, openssh-keysign 0:10.5p1-1.2.hum1, openssh-server 0:10.5p1-1.2.hum1, openssh-sk-dummy 0:10.5p1-1.2.hum1.",
   "date_published": "2026-10-06T20:35:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106582/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106582/",
   "title": "CVE-2026-106582 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T20:35:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106582/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106582/",
   "title": "CVE-2026-106582 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T20:35:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106582/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106582/",
   "title": "CVE-2026-106582 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T20:35:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106582/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106582/",
   "title": "CVE-2026-106582 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T20:35:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106555/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106555/",
   "title": "CVE-2026-106555 · openbsd openssh · disclosed",
   "content_text": "In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.",
   "date_published": "2026-10-06T20:28:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106555/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106555/",
   "title": "CVE-2026-106555 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T20:28:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106555/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106555/",
   "title": "CVE-2026-106555 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.3.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.3.hum1, openssh-askpass 0:10.5p1-1.3.hum1, openssh-clients 0:10.5p1-1.3.hum1, openssh-keycat 0:10.5p1-1.3.hum1, openssh-keysign 0:10.5p1-1.3.hum1, openssh-server 0:10.5p1-1.3.hum1, openssh-sk-dummy 0:10.5p1-1.3.hum1.",
   "date_published": "2026-10-06T20:28:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106555/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106555/",
   "title": "CVE-2026-106555 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T20:28:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106555/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106555/",
   "title": "CVE-2026-106555 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T20:28:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106555/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106555/",
   "title": "CVE-2026-106555 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T20:28:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106555/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106555/",
   "title": "CVE-2026-106555 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T20:28:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106553/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106553/",
   "title": "CVE-2026-106553 · openbsd openssh · disclosed",
   "content_text": "In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.",
   "date_published": "2026-10-06T20:25:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106553/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106553/",
   "title": "CVE-2026-106553 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T20:25:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106553/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106553/",
   "title": "CVE-2026-106553 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.3.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.3.hum1, openssh-askpass 0:10.5p1-1.3.hum1, openssh-clients 0:10.5p1-1.3.hum1, openssh-keycat 0:10.5p1-1.3.hum1, openssh-keysign 0:10.5p1-1.3.hum1, openssh-server 0:10.5p1-1.3.hum1, openssh-sk-dummy 0:10.5p1-1.3.hum1.",
   "date_published": "2026-10-06T20:25:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106553/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106553/",
   "title": "CVE-2026-106553 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T20:25:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106553/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106553/",
   "title": "CVE-2026-106553 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T20:25:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106553/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106553/",
   "title": "CVE-2026-106553 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T20:25:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106553/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106553/",
   "title": "CVE-2026-106553 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T20:25:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106552/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106552/",
   "title": "CVE-2026-106552 · openbsd openssh · disclosed",
   "content_text": "In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.",
   "date_published": "2026-10-06T20:20:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106552/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106552/",
   "title": "CVE-2026-106552 · openbsd openssh · fixed in Debian 14 (openssh 1:10.6p1-1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.6p1-1, openssh-gssapi 1:10.6p1-1.",
   "date_published": "2026-10-06T20:20:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106552/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106552/",
   "title": "CVE-2026-106552 · openbsd openssh · fixed in Red Hat hummingbird 1 (openssh 0:10.5p1-1.2.hum1 and 6 more)",
   "content_text": "Fixed versions: openssh 0:10.5p1-1.2.hum1, openssh-askpass 0:10.5p1-1.2.hum1, openssh-clients 0:10.5p1-1.2.hum1, openssh-keycat 0:10.5p1-1.2.hum1, openssh-keysign 0:10.5p1-1.2.hum1, openssh-server 0:10.5p1-1.2.hum1, openssh-sk-dummy 0:10.5p1-1.2.hum1.",
   "date_published": "2026-10-06T20:20:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106552/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106552/",
   "title": "CVE-2026-106552 · openbsd openssh · fixed in Ubuntu 22.04 LTS (openssh 1:8.9p1-3ubuntu0.18)",
   "content_text": "Fixed versions: openssh 1:8.9p1-3ubuntu0.18.",
   "date_published": "2026-10-06T20:20:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106552/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106552/",
   "title": "CVE-2026-106552 · openbsd openssh · fixed in Ubuntu 24.04 LTS (openssh 1:9.6p1-3ubuntu13.20)",
   "content_text": "Fixed versions: openssh 1:9.6p1-3ubuntu13.20.",
   "date_published": "2026-10-06T20:20:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106552/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106552/",
   "title": "CVE-2026-106552 · openbsd openssh · fixed in Ubuntu 26.04 LTS (openssh 1:10.2p1-2ubuntu3.8)",
   "content_text": "Fixed versions: openssh 1:10.2p1-2ubuntu3.8.",
   "date_published": "2026-10-06T20:20:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106552/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106552/",
   "title": "CVE-2026-106552 · openbsd openssh · fixed in Ubuntu 26.10 (openssh 1:10.5p1-1ubuntu3.1 and 1 more)",
   "content_text": "Fixed versions: openssh 1:10.5p1-1ubuntu3.1, openssh-gssapi 1:10.5p1-1ubuntu3.1.",
   "date_published": "2026-10-06T20:20:31Z"
  }
 ]
}