Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-0950

NIXPKGS-2026-0950
published on
Permalink CVE-2026-35385
7.5 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): HIGH
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): HIGH
  • Integrity impact (I): HIGH
  • Availability impact (A): HIGH
updated 1 day, 16 hours ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed package opensshTest
  • @LeSuisse removed package openssh-askpass
  • @LeSuisse removed package perlPackages.NetOpenSSH
  • @LeSuisse removed package perl5Packages.NetOpenSSH
  • @LeSuisse removed package lxqt.lxqt-openssh-askpass
  • @LeSuisse removed package perl538Packages.NetOpenSSH
  • @LeSuisse removed package perl540Packages.NetOpenSSH
  • @LeSuisse ignored reference https://m…
  • @LeSuisse accepted
  • @LeSuisse published on GitHub
In OpenSSH before 10.3, a file downloaded by scp may …

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).

Affected products

OpenSSH
  • <10.3

Matching in nixpkgs

pkgs.openssh_hpn

Implementation of the SSH protocol with high performance networking patches

Ignored packages (7)

Package maintainers