CVE-2025-32728

Mô tả

Tham khảo

• ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig · Product
• openssh/openssh-portable commit fc86875 · Patch
• lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html · Mailing List
• openssh.com/txt/release-10.0 · Release Notes
• openssh.com/txt/release-7.4 · Release Notes
• lists.debian.org/debian-lts-announce/2025/05/msg00008.html · Mailing List
• security.netapp.com/advisory/ntap-20250425-0002 · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-398330.html

Lỗ hổng khác của openssh

• CVE-2026-106583CAO 7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
• CVE-2026-106587THẤP 3.3In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean …
• CVE-2026-106586TRUNG BÌNH 4.3In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a …
• CVE-2026-106585TRUNG BÌNH 6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c…
• CVE-2026-106584THẤP 3.3In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can b…