このページは Debian 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2026-106555 の詳細 →
DEBIAN-CVE-2026-106555
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Debian:12
openssh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
openssh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
openssh
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.6p1-1"}]}]
Debian:14
openssh-gssapi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.6p1-1"}]}]
参照URL
- advisory security-tracker.debian.org