UBUNTU-CVE-2025-26465

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-26465

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-26465.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-26465

Related

Published

2025-02-18T00:00:00Z

Modified

2025-06-03T18:00:26Z

Severity

6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.

References

Affected packages

Ubuntu:Pro:16.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:7.2p2-4ubuntu2.10+esm7?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:7.2p2-4ubuntu2.10+esm7

Affected versions

1:6.*

1:6.9p1-2

1:6.9p1-3

1:7.*

1:7.1p1-1

1:7.1p1-3

1:7.1p1-4

1:7.1p1-6

1:7.1p2-1

1:7.1p2-2

1:7.2p1-1

1:7.2p2-1

1:7.2p2-2

1:7.2p2-3

1:7.2p2-4

1:7.2p2-4ubuntu1

1:7.2p2-4ubuntu2.1

1:7.2p2-4ubuntu2.2

1:7.2p2-4ubuntu2.4

1:7.2p2-4ubuntu2.5

1:7.2p2-4ubuntu2.6

1:7.2p2-4ubuntu2.7

1:7.2p2-4ubuntu2.8

1:7.2p2-4ubuntu2.10

1:7.2p2-4ubuntu2.10+esm1

1:7.2p2-4ubuntu2.10+esm2

1:7.2p2-4ubuntu2.10+esm3

1:7.2p2-4ubuntu2.10+esm4

1:7.2p2-4ubuntu2.10+esm5

1:7.2p2-4ubuntu2.10+esm6

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-client-ssh1-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-client-udeb",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-client-udeb-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-server-udeb",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-server-udeb-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        },
        {
            "binary_name": "ssh-krb5",
            "binary_version": "1:7.2p2-4ubuntu2.10+esm7"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS:16.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:7.2p2-4ubuntu2.fips.2.10.7?arch=source&distro=fips-updates/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:7.2p2-4ubuntu2.fips.2.10.7

Affected versions

1:7.*

1:7.2p2-4ubuntu2.fips.2.2.3

1:7.2p2-4ubuntu2.fips.2.4.1

1:7.2p2-4ubuntu2.fips.2.4.2

1:7.2p2-4ubuntu2.fips.2.8.1

1:7.2p2-4ubuntu2.fips.2.10.1

1:7.2p2-4ubuntu2.fips.2.10.2

1:7.2p2-4ubuntu2.fips.2.10.3

1:7.2p2-4ubuntu2.fips.2.10.4

1:7.2p2-4ubuntu2.fips.2.10.5

1:7.2p2-4ubuntu2.fips.2.10.6

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-client-hmac",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-client-ssh1",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-client-ssh1-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-client-udeb",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-client-udeb-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-server-hmac",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-server-udeb",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-server-udeb-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        },
        {
            "binary_name": "ssh-krb5",
            "binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS:16.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:7.2p2-4ubuntu2.fips.2.10.1?arch=source&distro=fips/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.2p2-4ubuntu2.fips.2.2

1:7.2p2-4ubuntu2.fips.2.2.1

1:7.2p2-4ubuntu2.fips.2.10.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:7.6p1-4ubuntu0.7+esm4?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:7.6p1-4ubuntu0.7+esm4

Affected versions

1:7.*

1:7.5p1-10

1:7.6p1-4

1:7.6p1-4ubuntu0.1

1:7.6p1-4ubuntu0.2

1:7.6p1-4ubuntu0.3

1:7.6p1-4ubuntu0.5

1:7.6p1-4ubuntu0.6

1:7.6p1-4ubuntu0.7

1:7.6p1-4ubuntu0.7+esm1

1:7.6p1-4ubuntu0.7+esm2

1:7.6p1-4ubuntu0.7+esm3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "openssh-client-udeb",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "openssh-server-udeb",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:7.6p1-4ubuntu0.7+esm4"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / openssh-ssh1

Package

Name: openssh-ssh1
Purl: pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-10?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.5p1-8

1:7.5p1-9

1:7.5p1-9build1

1:7.5p1-10

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS-updates:18.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:7.9p1-10~ubuntu18.04.fips.0.10?arch=source&distro=fips-updates/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:7.9p1-10~ubuntu18.04.fips.0.10

Affected versions

1:7.*

1:7.9p1-10~ubuntu18.04.fips.0.1

1:7.9p1-10~ubuntu18.04.fips.0.2

1:7.9p1-10~ubuntu18.04.fips.0.3

1:7.9p1-10~ubuntu18.04.fips.0.4

1:7.9p1-10~ubuntu18.04.fips.0.5

1:7.9p1-10~ubuntu18.04.fips.0.6

1:7.9p1-10~ubuntu18.04.fips.0.7

1:7.9p1-10~ubuntu18.04.fips.0.8

1:7.9p1-10~ubuntu18.04.fips.0.9

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-client-hmac",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-client-udeb",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-server-hmac",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-server-udeb",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-tests",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "openssh-tests-dbgsym",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS:18.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:7.9p1-10~ubuntu18.04.fips.0.2?arch=source&distro=fips/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.9p1-10~ubuntu18.04.fips.0.1

1:7.9p1-10~ubuntu18.04.fips.0.2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:8.2p1-4ubuntu0.12?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:8.2p1-4ubuntu0.12

Affected versions

1:8.*

1:8.0p1-6build1

1:8.1p1-1

1:8.1p1-5

1:8.2p1-4

1:8.2p1-4ubuntu0.1

1:8.2p1-4ubuntu0.2

1:8.2p1-4ubuntu0.3

1:8.2p1-4ubuntu0.4

1:8.2p1-4ubuntu0.5

1:8.2p1-4ubuntu0.7

1:8.2p1-4ubuntu0.8

1:8.2p1-4ubuntu0.9

1:8.2p1-4ubuntu0.10

1:8.2p1-4ubuntu0.11

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-client-udeb",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-server-udeb",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "openssh-tests-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.12"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:20.04:LTS / openssh-ssh1

Package

Name: openssh-ssh1
Purl: pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-11build1?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.5p1-11build1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS-updates:20.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:8.2p1-4ubuntu0.fips.0.12?arch=source&distro=fips-updates/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:8.2p1-4ubuntu0.fips.0.12

Affected versions

1:8.*

1:8.2p1-4ubuntu0.fips.0.2.1

1:8.2p1-4ubuntu0.fips.0.4.0

1:8.2p1-4ubuntu0.fips.0.5.0

1:8.2p1-4ubuntu0.fips.0.7

1:8.2p1-4ubuntu0.fips.0.8

1:8.2p1-4ubuntu0.fips.0.9

1:8.2p1-4ubuntu0.fips.0.10

1:8.2p1-4ubuntu0.fips.0.11

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-client-udeb",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-server-udeb",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "openssh-tests-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:8.2p1-4ubuntu0.fips.0.12"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS:20.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:8.2p1-4ubuntu0.fips.0.2.1?arch=source&distro=fips/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:8.*

1:8.2p1-4ubuntu0.fips.0.2.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:8.9p1-3ubuntu0.11?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:8.9p1-3ubuntu0.11

Affected versions

1:8.*

1:8.4p1-6ubuntu2

1:8.7p1-2

1:8.7p1-2build1

1:8.7p1-4

1:8.8p1-1

1:8.9p1-3

1:8.9p1-3ubuntu0.1

1:8.9p1-3ubuntu0.3

1:8.9p1-3ubuntu0.4

1:8.9p1-3ubuntu0.5

1:8.9p1-3ubuntu0.6

1:8.9p1-3ubuntu0.7

1:8.9p1-3ubuntu0.10

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "openssh-tests-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / openssh-ssh1

Package

Name: openssh-ssh1
Purl: pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-13?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.5p1-12

1:7.5p1-12build1

1:7.5p1-13

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS-preview:22.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:8.9p1-3ubuntu1.fips.0~ppa3?arch=source&distro=fips-preview/jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:8.*

1:8.9p1-3ubuntu0.4+Fips1

1:8.9p1-3ubuntu0.4+Fips3

1:8.9p1-3ubuntu1.fips.0~ppa3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:FIPS-updates:22.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:8.9p1-3ubuntu0.11+Fips1?arch=source&distro=fips-updates/jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:8.9p1-3ubuntu0.11+Fips1

Affected versions

1:8.*

1:8.9p1-3ubuntu0.4+Fips1

1:8.9p1-3ubuntu0.4+Fips3

1:8.9p1-3ubuntu0.6+Fips1

1:8.9p1-3ubuntu0.7+Fips1

1:8.9p1-3ubuntu0.10+Fips1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "openssh-tests",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "openssh-tests-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:8.9p1-3ubuntu0.11+Fips1"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:9.7p1-7ubuntu4.2?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:9.7p1-7ubuntu4.2

Affected versions

1:9.*

1:9.6p1-3ubuntu13

1:9.6p1-3ubuntu14

1:9.6p1-3ubuntu15

1:9.6p1-3ubuntu17

1:9.6p1-3ubuntu18

1:9.7p1-7ubuntu2

1:9.7p1-7ubuntu3

1:9.7p1-7ubuntu4

1:9.7p1-7ubuntu4.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "openssh-tests",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "openssh-tests-dbgsym",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:9.7p1-7ubuntu4.2"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / openssh-ssh1

Package

Name: openssh-ssh1
Purl: pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-17?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.5p1-16

1:7.5p1-17

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / openssh

Package

Name: openssh
Purl: pkg:deb/ubuntu/openssh@1:9.6p1-3ubuntu13.8?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:9.6p1-3ubuntu13.8

Affected versions

1:9.*

1:9.3p1-1ubuntu3

1:9.4p1-1ubuntu1

1:9.6p1-3ubuntu1

1:9.6p1-3ubuntu2

1:9.6p1-3ubuntu11

1:9.6p1-3ubuntu12

1:9.6p1-3ubuntu13

1:9.6p1-3ubuntu13.3

1:9.6p1-3ubuntu13.4

1:9.6p1-3ubuntu13.5

1:9.6p1-3ubuntu13.7

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "openssh-client",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "openssh-client-dbgsym",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "openssh-server",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "openssh-server-dbgsym",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "openssh-sftp-server",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "openssh-sftp-server-dbgsym",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "openssh-tests",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "openssh-tests-dbgsym",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "ssh",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "ssh-askpass-gnome",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        },
        {
            "binary_name": "ssh-askpass-gnome-dbgsym",
            "binary_version": "1:9.6p1-3ubuntu13.8"
        }
    ],
    "availability": "No subscription required",
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / openssh-ssh1

Package

Name: openssh-ssh1
Purl: pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-16?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.5p1-14

1:7.5p1-15

1:7.5p1-15build1

1:7.5p1-16

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:25.04 / openssh-ssh1

Package

Name: openssh-ssh1
Purl: pkg:deb/ubuntu/openssh-ssh1@1:7.5p1-17?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:7.*

1:7.5p1-17

Ecosystem specific

{
    "ubuntu_priority": "medium"
}