AZL-106703

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-106703.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-106703

Upstream

CVE-2026-106584

Published

2026-10-06T21:17:19Z

Modified

2026-10-08T05:35:32Z

Summary

CVE-2026-106584 affecting package openssh 9.8p1-10

Details

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-106584

Affected packages

Azure Linux:3 / openssh

Package

Name: openssh
Purl: pkg:rpm/azure-linux/openssh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

9.8p1-10

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-106703.json"