Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-0947

NIXPKGS-2026-0947

GitHub issue published on

Permalink CVE-2026-35388

2.5 LOW

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): LOW
Availability impact (A): NONE

updated 1 day, 16 hours ago by @LeSuisse Activity log

Created automatic suggestion 4 days, 8 hours ago
@LeSuisse ignored reference https://m… 1 day, 16 hours ago
@LeSuisse removed package opensshTest 1 day, 16 hours ago
@LeSuisse removed package openssh-askpass 1 day, 16 hours ago
@LeSuisse removed package perlPackages.NetOpenSSH 1 day, 16 hours ago
@LeSuisse removed package perl5Packages.NetOpenSSH 1 day, 16 hours ago
@LeSuisse removed package lxqt.lxqt-openssh-askpass 1 day, 16 hours ago
@LeSuisse removed package perl538Packages.NetOpenSSH 1 day, 16 hours ago
@LeSuisse removed package perl540Packages.NetOpenSSH 1 day, 16 hours ago
@LeSuisse accepted 1 day, 16 hours ago
@LeSuisse published on GitHub 1 day, 16 hours ago

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing …

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

References

Ignored references (1)

https://marc.info/?l=openssh-unix-dev&m=177513443901484&w=2

Affected products

OpenSSH

<10.3

Matching in nixpkgs

pkgs.openssh

Implementation of the SSH protocol

nixos-unstable 10.2p1
- nixpkgs-unstable 10.2p1
- nixos-unstable-small 10.2p1
nixos-25.11 10.2p1
- nixos-25.11-small 10.2p1
- nixpkgs-25.11-darwin 10.2p1

pkgs.openssh_hpn

Implementation of the SSH protocol with high performance networking patches

nixos-unstable 10.2p1
- nixpkgs-unstable 10.2p1
- nixos-unstable-small 10.2p1
nixos-25.11 10.2p1
- nixos-25.11-small 10.2p1
- nixpkgs-25.11-darwin 10.2p1

pkgs.openssh_gssapi

Implementation of the SSH protocol with GSSAPI support

nixos-unstable 10.2p1
- nixpkgs-unstable 10.2p1
- nixos-unstable-small 10.2p1
nixos-25.11 10.2p1
- nixos-25.11-small 10.2p1
- nixpkgs-25.11-darwin 10.2p1

pkgs.opensshWithKerberos

Implementation of the SSH protocol

nixos-unstable 10.2p1
- nixpkgs-unstable 10.2p1
- nixos-unstable-small 10.2p1
nixos-25.11 10.2p1
- nixos-25.11-small 10.2p1
- nixpkgs-25.11-darwin 10.2p1

pkgs.openssh_hpnWithKerberos

Implementation of the SSH protocol with high performance networking patches

nixos-unstable 10.2p1
- nixpkgs-unstable 10.2p1
- nixos-unstable-small 10.2p1
nixos-25.11 10.2p1
- nixos-25.11-small 10.2p1
- nixpkgs-25.11-darwin 10.2p1

Ignored packages (7)

pkgs.opensshTest

Implementation of the SSH protocol

nixos-unstable 10.2p1
- nixpkgs-unstable 10.2p1
- nixos-unstable-small 10.2p1
nixos-25.11 10.2p1
- nixos-25.11-small 10.2p1
- nixpkgs-25.11-darwin 10.2p1

pkgs.openssh-askpass

A passphrase dialog for OpenSSH and GTK

nixos-unstable 10.2p1
- nixpkgs-unstable 10.2p1
- nixos-unstable-small 10.2p1

pkgs.perlPackages.NetOpenSSH

Perl SSH client package implemented on top of OpenSSH

nixos-unstable 0.84
- nixpkgs-unstable 0.84
- nixos-unstable-small 0.84
nixos-25.11 0.84
- nixos-25.11-small 0.84
- nixpkgs-25.11-darwin 0.84

pkgs.perl5Packages.NetOpenSSH

Perl SSH client package implemented on top of OpenSSH

nixos-unstable 0.84
- nixpkgs-unstable 0.84
- nixos-unstable-small 0.84

pkgs.lxqt.lxqt-openssh-askpass

GUI to query passwords on behalf of SSH agents

nixos-unstable 2.3.0
- nixpkgs-unstable 2.3.0
- nixos-unstable-small 2.3.0
nixos-25.11 2.3.0
- nixos-25.11-small 2.3.0
- nixpkgs-25.11-darwin 2.3.0

pkgs.perl538Packages.NetOpenSSH

Perl SSH client package implemented on top of OpenSSH

nixos-25.11 0.84
- nixos-25.11-small 0.84
- nixpkgs-25.11-darwin 0.84

pkgs.perl540Packages.NetOpenSSH

Perl SSH client package implemented on top of OpenSSH

nixos-25.11 0.84
- nixos-25.11-small 0.84
- nixpkgs-25.11-darwin 0.84

Package maintainers

@philiptaron Philip Taron <philip.taron@gmail.com>
@dasJ Janne Heß <janne@hess.ooo>
@Conni2461 Simon Hauser <simon-hauser@outlook.com>
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>
@wahjava Ashish SHUKLA <ashish.is@lostca.se>