Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-60002 →

ALPINE-CVE-2026-60002

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the cli...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Alpine:v3.24 openssh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3_p1-r1"}]}]

Références

advisory security.alpinelinux.org