Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-106589 →

DEBIAN-CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 openssh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 openssh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 openssh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org