NIXPKGS-2026-0949
GitHub issue
published on
Permalink
CVE-2026-35387
3.1 LOW
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): HIGH
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): LOW
- Availability impact (A): NONE
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package openssh-askpass
- @LeSuisse removed package opensshWithKerberos
- @LeSuisse removed package perlPackages.NetOpenSSH
- @LeSuisse removed package perl5Packages.NetOpenSSH
- @LeSuisse removed package lxqt.lxqt-openssh-askpass
- @LeSuisse removed package perl538Packages.NetOpenSSH
- @LeSuisse removed package perl540Packages.NetOpenSSH
- @LeSuisse ignored reference https://m…
- @LeSuisse removed package openssh_gssapi
- @LeSuisse accepted
- @LeSuisse published on GitHub
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of …
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.
References
Affected products
OpenSSH
- <10.3
Matching in nixpkgs
pkgs.openssh
Implementation of the SSH protocol
pkgs.opensshTest
Implementation of the SSH protocol
pkgs.openssh_hpn
Implementation of the SSH protocol with high performance networking patches
Ignored packages (8)
pkgs.openssh_gssapi
Implementation of the SSH protocol with GSSAPI support
pkgs.openssh-askpass
A passphrase dialog for OpenSSH and GTK
pkgs.opensshWithKerberos
Implementation of the SSH protocol
pkgs.perlPackages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
pkgs.perl5Packages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
pkgs.lxqt.lxqt-openssh-askpass
GUI to query passwords on behalf of SSH agents
pkgs.perl538Packages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
pkgs.perl540Packages.NetOpenSSH
Perl SSH client package implemented on top of OpenSSH
Package maintainers
-
@philiptaron Philip Taron <philip.taron@gmail.com>
-
@dasJ Janne Heß <janne@hess.ooo>
-
@Conni2461 Simon Hauser <simon-hauser@outlook.com>
-
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>
-
@wahjava Ashish SHUKLA <ashish.is@lostca.se>