Nixpkgs Security Tracker

Login with GitHub

Suggestions search

All statuses
Filter by:
With package: pam_rssh

Found 8 matching suggestions

Untriaged
Permalink CVE-2025-48041
created 4 months, 3 weeks ago
SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to ssh from 3.0.1 until 5.3.3, 5.2.11.3 and 5.1.4.12.

Affected products

ssh
  • *
  • <pkg:otp/ssh@*

Matching in nixpkgs

pkgs.assh

Advanced SSH config - Regex, aliases, gateways, includes and dynamic hosts

  • nixos-unstable -

pkgs.pssh

Parallel SSH Tools

  • nixos-unstable -

pkgs.sshs

Terminal user interface for SSH

  • nixos-unstable -

pkgs.sshx

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.zssh

SSH and Telnet client with ZMODEM file transfer capability

  • nixos-unstable -

pkgs.passh

Sshpass alternative for non-interactive ssh auth

pkgs.sshed

ssh config editor and bookmarks manager

  • nixos-unstable -

pkgs.libssh

SSH client library

  • nixos-unstable -

pkgs.opkssh

Enables SSH to be used with OpenID Connect

  • nixos-unstable -

pkgs.smassh

TUI based typing test application inspired by MonkeyType

  • nixos-unstable -

pkgs.tarssh

Simple SSH tarpit inspired by endlessh

  • nixos-unstable -

pkgs.webssh

Web based SSH client

  • nixos-unstable -

pkgs.autossh

Automatically restart SSH sessions and tunnels

  • nixos-unstable -

pkgs.lazyssh

Terminal-based SSH manager

  • nixos-unstable -

pkgs.libssh2

Client-side C library implementing the SSH2 protocol

  • nixos-unstable -

pkgs.openssh

Implementation of the SSH protocol

  • nixos-unstable -

pkgs.sshoogr

A Groovy-based DSL for working with remote SSH servers

  • nixos-unstable -

pkgs.sshpass

Non-interactive ssh password auth

  • nixos-unstable -

pkgs.sshping

Measure character-echo latency and bandwidth for an interactive ssh session

  • nixos-unstable -

pkgs.baboossh

Tool to do SSH spreading

  • nixos-unstable -

pkgs.endlessh

SSH tarpit that slowly sends an endless banner

  • nixos-unstable -

pkgs.fast-ssh

TUI tool to use the SSH config for connections

  • nixos-unstable -

pkgs.hyperssh

Run SSH over hyperswarm

  • nixos-unstable -

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.pfsshell

PFS (PlayStation File System) shell for POSIX-based systems

  • nixos-unstable -

pkgs.ssh-mitm

Tool for SSH security audits

  • nixos-unstable -

pkgs.sshesame

Easy to set up and use SSH honeypot

  • nixos-unstable -

pkgs.sshguard

Protects hosts from brute-force attacks

  • nixos-unstable -

pkgs.sshified

Proxy HTTP requests through SSH

  • nixos-unstable -

pkgs.sshlatex

Collection of hacks to efficiently run LaTeX via ssh

  • nixos-unstable -

pkgs.sshocker

Tool for SSH, reverse sshfs and port forwarder

  • nixos-unstable -

pkgs.sshuttle

Transparent proxy server that works as a poor man's VPN

  • nixos-unstable -

pkgs.guile-ssh

Bindings to Libssh for GNU Guile

  • nixos-unstable -

pkgs.ssh-audit

Tool for ssh server auditing

  • nixos-unstable -

pkgs.ssh-ident

Start and use ssh-agent and load identities as necessary

pkgs.ssh-tools

Making SSH more convenient

  • nixos-unstable -

pkgs.sshportal

Simple, fun and transparent SSH (and telnet) bastion server

  • nixos-unstable -

pkgs.tmux-cssh

SSH to multiple hosts at the same time using tmux

pkgs.trzsz-ssh

SSH client designed as a drop-in replacement for the openssh client

  • nixos-unstable -

pkgs.usbip-ssh

Import usb devices from another linux machine with ssh's connection forwarding mechanism

pkgs.ssh-agents

Spawn and maintain multiple ssh-agents across terminals

  • nixos-unstable -

pkgs.ssh-to-age

Convert ssh private keys in ed25519 format to age keys

  • nixos-unstable -

pkgs.ssh-to-pgp

Convert ssh private keys to PGP

  • nixos-unstable -

pkgs.sshchecker

Dedicated SSH brute-forcing tool

  • nixos-unstable -

pkgs.sshfs-fuse

FUSE-based filesystem that allows remote filesystems to be mounted over SSH

  • nixos-unstable -

pkgs.endlessh-go

Implementation of endlessh exporting Prometheus metrics

pkgs.openssh_hpn

Implementation of the SSH protocol with high performance networking patches

  • nixos-unstable -

pkgs.ssh-copy-id

Tool to copy SSH public keys to a remote machine

  • nixos-unstable -

pkgs.sshx-server

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.ssh-import-id

Retrieves an SSH public key and installs it locally

  • nixos-unstable -

pkgs.ssh-tpm-agent

SSH agent with support for TPM sealed keys for public key authentication

  • nixos-unstable -

pkgs.openssh_gssapi

Implementation of the SSH protocol with GSSAPI support

  • nixos-unstable -

pkgs.tkey-ssh-agent

SSH Agent for TKey, the flexible open hardware/software USB security key

  • nixos-unstable -

pkgs.vault-ssh-plus

Automatically use HashiCorp Vault SSH Client Key Signing with ssh(1)

  • nixos-unstable -

pkgs.x11_ssh_askpass

Lightweight passphrase dialog for OpenSSH or other open variants of SSH

pkgs.ssh-openpgp-auth

Command-line tool that provides client-side functionality to transparently verify the identity of remote SSH hosts

  • nixos-unstable -

pkgs.ssh-key-confirmer

Test ssh login key acceptance without having the private key

  • nixos-unstable -

pkgs.sshd-openpgp-auth

Command-line tool for creating and managing OpenPGP based trust anchors for SSH host keys

  • nixos-unstable -

pkgs.gnomeExtensions.guake-ssh

Systray menu to connect to SSH hosts configured in ~/.ssh/config or any files in ~/.ssh/config.d/ using Guake.

  • nixos-unstable -
    • nixpkgs-unstable 5

pkgs.gnomeExtensions.ssh-profile-list

SSH Profile List is a GNOME extension that allows you to show SSH connections from .ssh/config file directly from the GNOME panel systray. This extension is fork of https://github.com/pramalho/guake-ssh-extension that modified to run on any terminal.

  • nixos-unstable -
    • nixpkgs-unstable 1

Package maintainers

Untriaged
Permalink CVE-2025-48040
created 4 months, 3 weeks ago
Malicious Key Exchange Messages may Lead to Excessive Resource Consumption

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to ssh from 3.0.1 until 5.3.3, 5.2.11.3 and 5.1.4.12.

Affected products

ssh
  • *
  • <pkg:otp/ssh@*

Matching in nixpkgs

pkgs.assh

Advanced SSH config - Regex, aliases, gateways, includes and dynamic hosts

  • nixos-unstable -

pkgs.pssh

Parallel SSH Tools

  • nixos-unstable -

pkgs.sshs

Terminal user interface for SSH

  • nixos-unstable -

pkgs.sshx

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.zssh

SSH and Telnet client with ZMODEM file transfer capability

  • nixos-unstable -

pkgs.passh

Sshpass alternative for non-interactive ssh auth

pkgs.sshed

ssh config editor and bookmarks manager

  • nixos-unstable -

pkgs.libssh

SSH client library

  • nixos-unstable -

pkgs.opkssh

Enables SSH to be used with OpenID Connect

  • nixos-unstable -

pkgs.smassh

TUI based typing test application inspired by MonkeyType

  • nixos-unstable -

pkgs.tarssh

Simple SSH tarpit inspired by endlessh

  • nixos-unstable -

pkgs.webssh

Web based SSH client

  • nixos-unstable -

pkgs.autossh

Automatically restart SSH sessions and tunnels

  • nixos-unstable -

pkgs.lazyssh

Terminal-based SSH manager

  • nixos-unstable -

pkgs.libssh2

Client-side C library implementing the SSH2 protocol

  • nixos-unstable -

pkgs.openssh

Implementation of the SSH protocol

  • nixos-unstable -

pkgs.sshoogr

A Groovy-based DSL for working with remote SSH servers

  • nixos-unstable -

pkgs.sshpass

Non-interactive ssh password auth

  • nixos-unstable -

pkgs.sshping

Measure character-echo latency and bandwidth for an interactive ssh session

  • nixos-unstable -

pkgs.baboossh

Tool to do SSH spreading

  • nixos-unstable -

pkgs.endlessh

SSH tarpit that slowly sends an endless banner

  • nixos-unstable -

pkgs.fast-ssh

TUI tool to use the SSH config for connections

  • nixos-unstable -

pkgs.hyperssh

Run SSH over hyperswarm

  • nixos-unstable -

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.pfsshell

PFS (PlayStation File System) shell for POSIX-based systems

  • nixos-unstable -

pkgs.ssh-mitm

Tool for SSH security audits

  • nixos-unstable -

pkgs.sshesame

Easy to set up and use SSH honeypot

  • nixos-unstable -

pkgs.sshguard

Protects hosts from brute-force attacks

  • nixos-unstable -

pkgs.sshified

Proxy HTTP requests through SSH

  • nixos-unstable -

pkgs.sshlatex

Collection of hacks to efficiently run LaTeX via ssh

  • nixos-unstable -

pkgs.sshocker

Tool for SSH, reverse sshfs and port forwarder

  • nixos-unstable -

pkgs.sshuttle

Transparent proxy server that works as a poor man's VPN

  • nixos-unstable -

pkgs.guile-ssh

Bindings to Libssh for GNU Guile

  • nixos-unstable -

pkgs.ssh-audit

Tool for ssh server auditing

  • nixos-unstable -

pkgs.ssh-ident

Start and use ssh-agent and load identities as necessary

pkgs.ssh-tools

Making SSH more convenient

  • nixos-unstable -

pkgs.sshportal

Simple, fun and transparent SSH (and telnet) bastion server

  • nixos-unstable -

pkgs.tmux-cssh

SSH to multiple hosts at the same time using tmux

pkgs.trzsz-ssh

SSH client designed as a drop-in replacement for the openssh client

  • nixos-unstable -

pkgs.usbip-ssh

Import usb devices from another linux machine with ssh's connection forwarding mechanism

pkgs.ssh-agents

Spawn and maintain multiple ssh-agents across terminals

  • nixos-unstable -

pkgs.ssh-to-age

Convert ssh private keys in ed25519 format to age keys

  • nixos-unstable -

pkgs.ssh-to-pgp

Convert ssh private keys to PGP

  • nixos-unstable -

pkgs.sshchecker

Dedicated SSH brute-forcing tool

  • nixos-unstable -

pkgs.sshfs-fuse

FUSE-based filesystem that allows remote filesystems to be mounted over SSH

  • nixos-unstable -

pkgs.endlessh-go

Implementation of endlessh exporting Prometheus metrics

pkgs.openssh_hpn

Implementation of the SSH protocol with high performance networking patches

  • nixos-unstable -

pkgs.ssh-copy-id

Tool to copy SSH public keys to a remote machine

  • nixos-unstable -

pkgs.sshx-server

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.ssh-import-id

Retrieves an SSH public key and installs it locally

  • nixos-unstable -

pkgs.ssh-tpm-agent

SSH agent with support for TPM sealed keys for public key authentication

  • nixos-unstable -

pkgs.openssh_gssapi

Implementation of the SSH protocol with GSSAPI support

  • nixos-unstable -

pkgs.tkey-ssh-agent

SSH Agent for TKey, the flexible open hardware/software USB security key

  • nixos-unstable -

pkgs.vault-ssh-plus

Automatically use HashiCorp Vault SSH Client Key Signing with ssh(1)

  • nixos-unstable -

pkgs.x11_ssh_askpass

Lightweight passphrase dialog for OpenSSH or other open variants of SSH

pkgs.ssh-openpgp-auth

Command-line tool that provides client-side functionality to transparently verify the identity of remote SSH hosts

  • nixos-unstable -

pkgs.ssh-key-confirmer

Test ssh login key acceptance without having the private key

  • nixos-unstable -

pkgs.sshd-openpgp-auth

Command-line tool for creating and managing OpenPGP based trust anchors for SSH host keys

  • nixos-unstable -

pkgs.gnomeExtensions.guake-ssh

Systray menu to connect to SSH hosts configured in ~/.ssh/config or any files in ~/.ssh/config.d/ using Guake.

  • nixos-unstable -
    • nixpkgs-unstable 5

pkgs.gnomeExtensions.ssh-profile-list

SSH Profile List is a GNOME extension that allows you to show SSH connections from .ssh/config file directly from the GNOME panel systray. This extension is fork of https://github.com/pramalho/guake-ssh-extension that modified to run on any terminal.

  • nixos-unstable -
    • nixpkgs-unstable 1

Package maintainers

Untriaged
Permalink CVE-2025-48038
created 4 months, 3 weeks ago
Unverified File Handles can Cause Excessive Use of System Resources

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to ssh from 3.0.1 until 5.3.3, 5.2.11.3 and 5.1.4.12.

Affected products

ssh
  • *
  • <pkg:otp/ssh@*

Matching in nixpkgs

pkgs.assh

Advanced SSH config - Regex, aliases, gateways, includes and dynamic hosts

  • nixos-unstable -

pkgs.pssh

Parallel SSH Tools

  • nixos-unstable -

pkgs.sshs

Terminal user interface for SSH

  • nixos-unstable -

pkgs.sshx

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.zssh

SSH and Telnet client with ZMODEM file transfer capability

  • nixos-unstable -

pkgs.passh

Sshpass alternative for non-interactive ssh auth

pkgs.sshed

ssh config editor and bookmarks manager

  • nixos-unstable -

pkgs.libssh

SSH client library

  • nixos-unstable -

pkgs.opkssh

Enables SSH to be used with OpenID Connect

  • nixos-unstable -

pkgs.smassh

TUI based typing test application inspired by MonkeyType

  • nixos-unstable -

pkgs.tarssh

Simple SSH tarpit inspired by endlessh

  • nixos-unstable -

pkgs.webssh

Web based SSH client

  • nixos-unstable -

pkgs.autossh

Automatically restart SSH sessions and tunnels

  • nixos-unstable -

pkgs.lazyssh

Terminal-based SSH manager

  • nixos-unstable -

pkgs.libssh2

Client-side C library implementing the SSH2 protocol

  • nixos-unstable -

pkgs.openssh

Implementation of the SSH protocol

  • nixos-unstable -

pkgs.sshoogr

A Groovy-based DSL for working with remote SSH servers

  • nixos-unstable -

pkgs.sshpass

Non-interactive ssh password auth

  • nixos-unstable -

pkgs.sshping

Measure character-echo latency and bandwidth for an interactive ssh session

  • nixos-unstable -

pkgs.baboossh

Tool to do SSH spreading

  • nixos-unstable -

pkgs.endlessh

SSH tarpit that slowly sends an endless banner

  • nixos-unstable -

pkgs.fast-ssh

TUI tool to use the SSH config for connections

  • nixos-unstable -

pkgs.hyperssh

Run SSH over hyperswarm

  • nixos-unstable -

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.pfsshell

PFS (PlayStation File System) shell for POSIX-based systems

  • nixos-unstable -

pkgs.ssh-mitm

Tool for SSH security audits

  • nixos-unstable -

pkgs.sshesame

Easy to set up and use SSH honeypot

  • nixos-unstable -

pkgs.sshguard

Protects hosts from brute-force attacks

  • nixos-unstable -

pkgs.sshified

Proxy HTTP requests through SSH

  • nixos-unstable -

pkgs.sshlatex

Collection of hacks to efficiently run LaTeX via ssh

  • nixos-unstable -

pkgs.sshocker

Tool for SSH, reverse sshfs and port forwarder

  • nixos-unstable -

pkgs.sshuttle

Transparent proxy server that works as a poor man's VPN

  • nixos-unstable -

pkgs.guile-ssh

Bindings to Libssh for GNU Guile

  • nixos-unstable -

pkgs.ssh-audit

Tool for ssh server auditing

  • nixos-unstable -

pkgs.ssh-ident

Start and use ssh-agent and load identities as necessary

pkgs.ssh-tools

Making SSH more convenient

  • nixos-unstable -

pkgs.sshportal

Simple, fun and transparent SSH (and telnet) bastion server

  • nixos-unstable -

pkgs.tmux-cssh

SSH to multiple hosts at the same time using tmux

pkgs.trzsz-ssh

SSH client designed as a drop-in replacement for the openssh client

  • nixos-unstable -

pkgs.usbip-ssh

Import usb devices from another linux machine with ssh's connection forwarding mechanism

pkgs.ssh-agents

Spawn and maintain multiple ssh-agents across terminals

  • nixos-unstable -

pkgs.ssh-to-age

Convert ssh private keys in ed25519 format to age keys

  • nixos-unstable -

pkgs.ssh-to-pgp

Convert ssh private keys to PGP

  • nixos-unstable -

pkgs.sshchecker

Dedicated SSH brute-forcing tool

  • nixos-unstable -

pkgs.sshfs-fuse

FUSE-based filesystem that allows remote filesystems to be mounted over SSH

  • nixos-unstable -

pkgs.endlessh-go

Implementation of endlessh exporting Prometheus metrics

pkgs.openssh_hpn

Implementation of the SSH protocol with high performance networking patches

  • nixos-unstable -

pkgs.ssh-copy-id

Tool to copy SSH public keys to a remote machine

  • nixos-unstable -

pkgs.sshx-server

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.ssh-import-id

Retrieves an SSH public key and installs it locally

  • nixos-unstable -

pkgs.ssh-tpm-agent

SSH agent with support for TPM sealed keys for public key authentication

  • nixos-unstable -

pkgs.openssh_gssapi

Implementation of the SSH protocol with GSSAPI support

  • nixos-unstable -

pkgs.tkey-ssh-agent

SSH Agent for TKey, the flexible open hardware/software USB security key

  • nixos-unstable -

pkgs.vault-ssh-plus

Automatically use HashiCorp Vault SSH Client Key Signing with ssh(1)

  • nixos-unstable -

pkgs.x11_ssh_askpass

Lightweight passphrase dialog for OpenSSH or other open variants of SSH

pkgs.ssh-openpgp-auth

Command-line tool that provides client-side functionality to transparently verify the identity of remote SSH hosts

  • nixos-unstable -

pkgs.ssh-key-confirmer

Test ssh login key acceptance without having the private key

  • nixos-unstable -

pkgs.sshd-openpgp-auth

Command-line tool for creating and managing OpenPGP based trust anchors for SSH host keys

  • nixos-unstable -

pkgs.gnomeExtensions.guake-ssh

Systray menu to connect to SSH hosts configured in ~/.ssh/config or any files in ~/.ssh/config.d/ using Guake.

  • nixos-unstable -
    • nixpkgs-unstable 5

pkgs.gnomeExtensions.ssh-profile-list

SSH Profile List is a GNOME extension that allows you to show SSH connections from .ssh/config file directly from the GNOME panel systray. This extension is fork of https://github.com/pramalho/guake-ssh-extension that modified to run on any terminal.

  • nixos-unstable -
    • nixpkgs-unstable 1

Package maintainers

Untriaged
Permalink CVE-2025-48039
created 4 months, 3 weeks ago
Unverified Paths can Cause Excessive Use of System Resources

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to ssh from 3.0.1 until 5.3.3, 5.2.11.3 and 5.1.4.12.

Affected products

ssh
  • <pkg:otp/ssh@*
  • *

Matching in nixpkgs

pkgs.assh

Advanced SSH config - Regex, aliases, gateways, includes and dynamic hosts

  • nixos-unstable -

pkgs.pssh

Parallel SSH Tools

  • nixos-unstable -

pkgs.sshs

Terminal user interface for SSH

  • nixos-unstable -

pkgs.sshx

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.zssh

SSH and Telnet client with ZMODEM file transfer capability

  • nixos-unstable -

pkgs.passh

Sshpass alternative for non-interactive ssh auth

pkgs.sshed

ssh config editor and bookmarks manager

  • nixos-unstable -

pkgs.libssh

SSH client library

  • nixos-unstable -

pkgs.opkssh

Enables SSH to be used with OpenID Connect

  • nixos-unstable -

pkgs.smassh

TUI based typing test application inspired by MonkeyType

  • nixos-unstable -

pkgs.tarssh

Simple SSH tarpit inspired by endlessh

  • nixos-unstable -

pkgs.webssh

Web based SSH client

  • nixos-unstable -

pkgs.autossh

Automatically restart SSH sessions and tunnels

  • nixos-unstable -

pkgs.lazyssh

Terminal-based SSH manager

  • nixos-unstable -

pkgs.libssh2

Client-side C library implementing the SSH2 protocol

  • nixos-unstable -

pkgs.openssh

Implementation of the SSH protocol

  • nixos-unstable -

pkgs.sshoogr

A Groovy-based DSL for working with remote SSH servers

  • nixos-unstable -

pkgs.sshpass

Non-interactive ssh password auth

  • nixos-unstable -

pkgs.sshping

Measure character-echo latency and bandwidth for an interactive ssh session

  • nixos-unstable -

pkgs.baboossh

Tool to do SSH spreading

  • nixos-unstable -

pkgs.endlessh

SSH tarpit that slowly sends an endless banner

  • nixos-unstable -

pkgs.fast-ssh

TUI tool to use the SSH config for connections

  • nixos-unstable -

pkgs.hyperssh

Run SSH over hyperswarm

  • nixos-unstable -

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.pfsshell

PFS (PlayStation File System) shell for POSIX-based systems

  • nixos-unstable -

pkgs.ssh-mitm

Tool for SSH security audits

  • nixos-unstable -

pkgs.sshesame

Easy to set up and use SSH honeypot

  • nixos-unstable -

pkgs.sshguard

Protects hosts from brute-force attacks

  • nixos-unstable -

pkgs.sshified

Proxy HTTP requests through SSH

  • nixos-unstable -

pkgs.sshlatex

Collection of hacks to efficiently run LaTeX via ssh

  • nixos-unstable -

pkgs.sshocker

Tool for SSH, reverse sshfs and port forwarder

  • nixos-unstable -

pkgs.sshuttle

Transparent proxy server that works as a poor man's VPN

  • nixos-unstable -

pkgs.guile-ssh

Bindings to Libssh for GNU Guile

  • nixos-unstable -

pkgs.ssh-audit

Tool for ssh server auditing

  • nixos-unstable -

pkgs.ssh-ident

Start and use ssh-agent and load identities as necessary

pkgs.ssh-tools

Making SSH more convenient

  • nixos-unstable -

pkgs.sshportal

Simple, fun and transparent SSH (and telnet) bastion server

  • nixos-unstable -

pkgs.tmux-cssh

SSH to multiple hosts at the same time using tmux

pkgs.trzsz-ssh

SSH client designed as a drop-in replacement for the openssh client

  • nixos-unstable -

pkgs.usbip-ssh

Import usb devices from another linux machine with ssh's connection forwarding mechanism

pkgs.ssh-agents

Spawn and maintain multiple ssh-agents across terminals

  • nixos-unstable -

pkgs.ssh-to-age

Convert ssh private keys in ed25519 format to age keys

  • nixos-unstable -

pkgs.ssh-to-pgp

Convert ssh private keys to PGP

  • nixos-unstable -

pkgs.sshchecker

Dedicated SSH brute-forcing tool

  • nixos-unstable -

pkgs.sshfs-fuse

FUSE-based filesystem that allows remote filesystems to be mounted over SSH

  • nixos-unstable -

pkgs.endlessh-go

Implementation of endlessh exporting Prometheus metrics

pkgs.openssh_hpn

Implementation of the SSH protocol with high performance networking patches

  • nixos-unstable -

pkgs.ssh-copy-id

Tool to copy SSH public keys to a remote machine

  • nixos-unstable -

pkgs.sshx-server

Fast, collaborative live terminal sharing over the web

  • nixos-unstable -

pkgs.ssh-import-id

Retrieves an SSH public key and installs it locally

  • nixos-unstable -

pkgs.ssh-tpm-agent

SSH agent with support for TPM sealed keys for public key authentication

  • nixos-unstable -

pkgs.openssh_gssapi

Implementation of the SSH protocol with GSSAPI support

  • nixos-unstable -

pkgs.tkey-ssh-agent

SSH Agent for TKey, the flexible open hardware/software USB security key

  • nixos-unstable -

pkgs.vault-ssh-plus

Automatically use HashiCorp Vault SSH Client Key Signing with ssh(1)

  • nixos-unstable -

pkgs.x11_ssh_askpass

Lightweight passphrase dialog for OpenSSH or other open variants of SSH

pkgs.ssh-openpgp-auth

Command-line tool that provides client-side functionality to transparently verify the identity of remote SSH hosts

  • nixos-unstable -

pkgs.ssh-key-confirmer

Test ssh login key acceptance without having the private key

  • nixos-unstable -

pkgs.sshd-openpgp-auth

Command-line tool for creating and managing OpenPGP based trust anchors for SSH host keys

  • nixos-unstable -

pkgs.gnomeExtensions.guake-ssh

Systray menu to connect to SSH hosts configured in ~/.ssh/config or any files in ~/.ssh/config.d/ using Guake.

  • nixos-unstable -
    • nixpkgs-unstable 5

pkgs.gnomeExtensions.ssh-profile-list

SSH Profile List is a GNOME extension that allows you to show SSH connections from .ssh/config file directly from the GNOME panel systray. This extension is fork of https://github.com/pramalho/guake-ssh-extension that modified to run on any terminal.

  • nixos-unstable -
    • nixpkgs-unstable 1

Package maintainers

Untriaged
Permalink CVE-2025-6018
created 4 months, 3 weeks ago
Pam-config: lpe from unprivileged to allow_active in pam

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.

Affected products

pam
  • <1.1.8-24.71.1

Matching in nixpkgs

pkgs.pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ipam

Cli based IPAM written in Go with PowerDNS support

pkgs.opam

Package manager for OCaml

  • nixos-unstable -

pkgs.paml

Phylogenetic Analysis by Maximum Likelihood (PAML)

  • nixos-unstable -

pkgs.dspam

Community Driven Antispam Filter

  • nixos-unstable -

pkgs.pamix

Pulseaudio terminal mixer

  • nixos-unstable -

pkgs.rspamd

Advanced spam filtering system

  • nixos-unstable -

pkgs.openpam

Open source PAM library that focuses on simplicity, correctness, and cleanliness

pkgs.pam_p11

Authentication with PKCS#11 modules

  • nixos-unstable -

pkgs.pam_u2f

PAM module for allowing authentication with a U2F device

  • nixos-unstable -

pkgs.pamixer

Pulseaudio command line mixer

  • nixos-unstable -

pkgs.pam_krb5

PAM module allowing PAM-aware applications to authenticate users by performing an AS exchange with a Kerberos KDC

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.linux-pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ncpamixer

Terminal mixer for PulseAudio inspired by pavucontrol

  • nixos-unstable -

pkgs.opam2json

Convert opam file syntax to JSON

  • nixos-unstable -

pkgs.pam_gnupg

Unlock GnuPG keys on login

  • nixos-unstable -

pkgs.pam_mount

PAM module to mount volumes for a user session

  • nixos-unstable -

pkgs.pam_mysql

PAM authentication module against a MySQL database

pkgs.pam_pgsql

Support to authenticate against PostgreSQL for PAM-enabled appliations

pkgs.pamtester

Utility program to test the PAM facility

  • nixos-unstable -

pkgs.pam_ccreds

PAM module to locally authenticate using an enterprise identity when the network is unavailable

  • nixos-unstable -
    • nixpkgs-unstable 10

pkgs.pam_mktemp

PAM for login service to provide per-user private directories

  • nixos-unstable -

pkgs.pam_rundir

Provide user runtime directory on Linux systems

  • nixos-unstable -

pkgs.pam_tmpdir

PAM module for creating safe per-user temporary directories

  • nixos-unstable -

pkgs.apparmor-pam

Mandatory access control system - PAM service

  • nixos-unstable -

pkgs.opam-publish

Tool to ease contributions to opam repositories

  • nixos-unstable -

pkgs.pam-reattach

Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)

  • nixos-unstable -

pkgs.nss_pam_ldapd

LDAP identity and authentication for NSS/PAM

  • nixos-unstable -

pkgs.opam-installer

Handle (un)installation from opam install files

  • nixos-unstable -

pkgs.pam-honeycreds

PAM module that sends warnings when fake passwords are used

  • nixos-unstable -

pkgs.rspamd-trainer

Grabs messages from a spam mailbox via IMAP and feeds them to Rspamd for training

Package maintainers

Untriaged
Permalink CVE-2025-6020
created 4 months, 3 weeks ago
Linux-pam: linux-pam directory traversal

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

Affected products

pam
  • *
linux-pam
  • <1.7.1
rhosdt/tempo-rhel8
  • *
rhosdt/tempo-query-rhel8
  • *
rhosdt/tempo-gateway-rhel8
  • *
rhosdt/tempo-rhel8-operator
  • *
rhpam-7/rhpam-rhel8-operator
  • *
rhpam-7/rhpam-kieserver-rhel8
  • *
rhpam-7/rhpam-operator-bundle
  • *
rhosdt/tempo-gateway-opa-rhel8
  • *
rhpam-7/rhpam-controller-rhel8
  • *
rhosdt/tempo-jaeger-query-rhel8
  • *
rhpam-7/rhpam-dashbuilder-rhel8
  • *
rhpam-7/rhpam-smartrouter-rhel8
  • *
discovery/discovery-server-rhel9
  • *
rhosdt/opentelemetry-rhel8-operator
  • *
rhpam-7/rhpam-businesscentral-rhel8
  • *
rhosdt/opentelemetry-collector-rhel8
  • *
registry.redhat.io/rhosdt/tempo-rhel8
  • *
rhpam-7/rhpam-process-migration-rhel8
  • *
web-terminal/web-terminal-tooling-rhel9
  • *
cert-manager/jetstack-cert-manager-rhel9
  • *
web-terminal/web-terminal-rhel9-operator
  • *
openshift-serverless-1/logic-rhel8-operator
  • *
registry.redhat.io/rhosdt/tempo-query-rhel8
  • *
rhosdt/opentelemetry-target-allocator-rhel8
  • *
openshift-serverless-1/logic-operator-bundle
  • *
insights-proxy/insights-proxy-container-rhel9
  • *
registry.redhat.io/rhosdt/tempo-gateway-rhel8
  • *
compliance/openshift-compliance-openscap-rhel8
  • *
openshift-serverless-1/logic-swf-builder-rhel8
  • *
openshift-serverless-1/logic-swf-devmode-rhel8
  • *
registry.redhat.io/rhosdt/tempo-rhel8-operator
  • *
rhpam-7/rhpam-businesscentral-monitoring-rhel8
  • *
openshift-sandboxed-containers/osc-monitor-rhel9
  • *
registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8
  • *
registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8
  • *
openshift-serverless-1/logic-db-migrator-tool-rhel8
  • *
registry.redhat.io/discovery/discovery-server-rhel9
  • *
openshift-serverless-1/logic-management-console-rhel8
  • *
openshift-sandboxed-containers/osc-podvm-builder-rhel9
  • *
openshift-sandboxed-containers/osc-podvm-payload-rhel9
  • *
registry.redhat.io/rhosdt/opentelemetry-rhel8-operator
  • *
openshift-serverless-1/logic-data-index-ephemeral-rhel8
  • *
registry.redhat.io/rhosdt/opentelemetry-collector-rhel8
  • *
openshift-serverless-1/logic-data-index-postgresql-rhel8
  • *
openshift-serverless-1/logic-jobs-service-ephemeral-rhel8
  • *
openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9
  • *
openshift-serverless-1/logic-jobs-service-postgresql-rhel8
  • *
openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8
  • *
registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel8
  • *
registry.redhat.io/openshift-sandboxed-containers/osc-monitor-rhel9
  • *
registry.redhat.io/openshift-sandboxed-containers/osc-podvm-builder-rhel9
  • *
registry.redhat.io/openshift-sandboxed-containers/osc-podvm-payload-rhel9
  • *
registry.redhat.io/openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9
  • *

Matching in nixpkgs

pkgs.pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ipam

Cli based IPAM written in Go with PowerDNS support

pkgs.opam

Package manager for OCaml

  • nixos-unstable -

pkgs.paml

Phylogenetic Analysis by Maximum Likelihood (PAML)

  • nixos-unstable -

pkgs.dspam

Community Driven Antispam Filter

  • nixos-unstable -

pkgs.pamix

Pulseaudio terminal mixer

  • nixos-unstable -

pkgs.rspamd

Advanced spam filtering system

  • nixos-unstable -

pkgs.openpam

Open source PAM library that focuses on simplicity, correctness, and cleanliness

pkgs.pam_p11

Authentication with PKCS#11 modules

  • nixos-unstable -

pkgs.pam_u2f

PAM module for allowing authentication with a U2F device

  • nixos-unstable -

pkgs.pamixer

Pulseaudio command line mixer

  • nixos-unstable -

pkgs.pam_krb5

PAM module allowing PAM-aware applications to authenticate users by performing an AS exchange with a Kerberos KDC

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.linux-pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ncpamixer

Terminal mixer for PulseAudio inspired by pavucontrol

  • nixos-unstable -

pkgs.opam2json

Convert opam file syntax to JSON

  • nixos-unstable -

pkgs.pam_gnupg

Unlock GnuPG keys on login

  • nixos-unstable -

pkgs.pam_mount

PAM module to mount volumes for a user session

  • nixos-unstable -

pkgs.pam_mysql

PAM authentication module against a MySQL database

pkgs.pam_pgsql

Support to authenticate against PostgreSQL for PAM-enabled appliations

pkgs.pamtester

Utility program to test the PAM facility

  • nixos-unstable -

pkgs.pam_ccreds

PAM module to locally authenticate using an enterprise identity when the network is unavailable

  • nixos-unstable -
    • nixpkgs-unstable 10

pkgs.pam_mktemp

PAM for login service to provide per-user private directories

  • nixos-unstable -

pkgs.pam_rundir

Provide user runtime directory on Linux systems

  • nixos-unstable -

pkgs.pam_tmpdir

PAM module for creating safe per-user temporary directories

  • nixos-unstable -

pkgs.apparmor-pam

Mandatory access control system - PAM service

  • nixos-unstable -

pkgs.opam-publish

Tool to ease contributions to opam repositories

  • nixos-unstable -

pkgs.pam-reattach

Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)

  • nixos-unstable -

pkgs.nss_pam_ldapd

LDAP identity and authentication for NSS/PAM

  • nixos-unstable -

pkgs.opam-installer

Handle (un)installation from opam install files

  • nixos-unstable -

pkgs.pam-honeycreds

PAM module that sends warnings when fake passwords are used

  • nixos-unstable -

pkgs.rspamd-trainer

Grabs messages from a spam mailbox via IMAP and feeds them to Rspamd for training

Package maintainers

Untriaged
Permalink CVE-2024-10963
created 4 months, 3 weeks ago
Pam: improper hostname interpretation in pam_access leads to access control bypass

A vulnerability was found in pam_access due to the improper handling of tokens in access.conf, interpreted as hostnames. This flaw allows attackers to bypass access restrictions by spoofing hostnames, undermining configurations designed to limit access to specific TTYs or services. The flaw poses a risk in environments relying on these configurations for local access control.

Affected products

pam
  • <1.7.0
  • ==1.5.1
  • *
  • ==1.3.1
rhcos
  • *
odh-rhel8-operator
odh-dashboard-rhel8
odh-modelmesh-rhel8
odh-operator-bundle
odh-mm-rest-proxy-rhel8
odh-model-registry-rhel8
rhoai/odh-dashboard-rhel8
  • *
odh-kueue-controller-rhel8
odh-mlmd-grpc-server-rhel8
odh-model-controller-rhel8
odh-trustyai-service-rhel8
odh-training-operator-rhel8
odh-codeflare-operator-rhel8
odh-ml-pipelines-driver-rhel8
odh-notebook-controller-rhel8
odh-ml-pipelines-launcher-rhel8
odh-kf-notebook-controller-rhel8
odh-model-registry-operator-rhel8
odh-modelmesh-runtime-adapter-rhel8
odh-trustyai-service-operator-rhel8
odh-ml-pipelines-api-server-v2-rhel8
odh-kuberay-operator-controller-rhel8
odh-modelmesh-serving-controller-rhel8
odh-ml-pipelines-persistenceagent-v2-rhel8
odh-ml-pipelines-scheduledworkflow-v2-rhel8
registry.redhat.io/rhoai/odh-dashboard-rhel8
  • *
odh-data-science-pipelines-argo-argoexec-rhel8
odh-data-science-pipelines-operator-controller-rhel8
odh-data-science-pipelines-argo-workflowcontroller-rhel8

Matching in nixpkgs

pkgs.pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ipam

Cli based IPAM written in Go with PowerDNS support

pkgs.opam

Package manager for OCaml

  • nixos-unstable -

pkgs.paml

Phylogenetic Analysis by Maximum Likelihood (PAML)

  • nixos-unstable -

pkgs.dspam

Community Driven Antispam Filter

  • nixos-unstable -

pkgs.pamix

Pulseaudio terminal mixer

  • nixos-unstable -

pkgs.rspamd

Advanced spam filtering system

  • nixos-unstable -

pkgs.openpam

Open source PAM library that focuses on simplicity, correctness, and cleanliness

pkgs.pam_p11

Authentication with PKCS#11 modules

  • nixos-unstable -

pkgs.pam_u2f

PAM module for allowing authentication with a U2F device

  • nixos-unstable -

pkgs.pamixer

Pulseaudio command line mixer

  • nixos-unstable -

pkgs.pam_krb5

PAM module allowing PAM-aware applications to authenticate users by performing an AS exchange with a Kerberos KDC

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.linux-pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ncpamixer

Terminal mixer for PulseAudio inspired by pavucontrol

  • nixos-unstable -

pkgs.opam2json

Convert opam file syntax to JSON

  • nixos-unstable -

pkgs.pam_gnupg

Unlock GnuPG keys on login

  • nixos-unstable -

pkgs.pam_mount

PAM module to mount volumes for a user session

  • nixos-unstable -

pkgs.pam_mysql

PAM authentication module against a MySQL database

pkgs.pam_pgsql

Support to authenticate against PostgreSQL for PAM-enabled appliations

pkgs.pamtester

Utility program to test the PAM facility

  • nixos-unstable -

pkgs.pam_ccreds

PAM module to locally authenticate using an enterprise identity when the network is unavailable

  • nixos-unstable -
    • nixpkgs-unstable 10

pkgs.pam_mktemp

PAM for login service to provide per-user private directories

  • nixos-unstable -

pkgs.pam_rundir

Provide user runtime directory on Linux systems

  • nixos-unstable -

pkgs.pam_tmpdir

PAM module for creating safe per-user temporary directories

  • nixos-unstable -

pkgs.apparmor-pam

Mandatory access control system - PAM service

  • nixos-unstable -

pkgs.opam-publish

Tool to ease contributions to opam repositories

  • nixos-unstable -

pkgs.pam-reattach

Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)

  • nixos-unstable -

pkgs.nss_pam_ldapd

LDAP identity and authentication for NSS/PAM

  • nixos-unstable -

pkgs.opam-installer

Handle (un)installation from opam install files

  • nixos-unstable -

pkgs.pam-honeycreds

PAM module that sends warnings when fake passwords are used

  • nixos-unstable -

pkgs.rspamd-trainer

Grabs messages from a spam mailbox via IMAP and feeds them to Rspamd for training

Package maintainers

Untriaged
Permalink CVE-2024-10041
created 4 months, 3 weeks ago
Pam: libpam: libpam vulnerable to read hashed password

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

Affected products

pam
  • *
  • <1.6.0

Matching in nixpkgs

pkgs.pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ipam

Cli based IPAM written in Go with PowerDNS support

pkgs.opam

Package manager for OCaml

  • nixos-unstable -

pkgs.paml

Phylogenetic Analysis by Maximum Likelihood (PAML)

  • nixos-unstable -

pkgs.dspam

Community Driven Antispam Filter

  • nixos-unstable -

pkgs.pamix

Pulseaudio terminal mixer

  • nixos-unstable -

pkgs.rspamd

Advanced spam filtering system

  • nixos-unstable -

pkgs.openpam

Open source PAM library that focuses on simplicity, correctness, and cleanliness

pkgs.pam_p11

Authentication with PKCS#11 modules

  • nixos-unstable -

pkgs.pam_u2f

PAM module for allowing authentication with a U2F device

  • nixos-unstable -

pkgs.pamixer

Pulseaudio command line mixer

  • nixos-unstable -

pkgs.pam_krb5

PAM module allowing PAM-aware applications to authenticate users by performing an AS exchange with a Kerberos KDC

pkgs.pam_rssh

PAM module for authenticating via ssh-agent, written in Rust

  • nixos-unstable -

pkgs.linux-pam

Pluggable Authentication Modules, a flexible mechanism for authenticating user

  • nixos-unstable -

pkgs.ncpamixer

Terminal mixer for PulseAudio inspired by pavucontrol

  • nixos-unstable -

pkgs.opam2json

Convert opam file syntax to JSON

  • nixos-unstable -

pkgs.pam_gnupg

Unlock GnuPG keys on login

  • nixos-unstable -

pkgs.pam_mount

PAM module to mount volumes for a user session

  • nixos-unstable -

pkgs.pam_mysql

PAM authentication module against a MySQL database

pkgs.pam_pgsql

Support to authenticate against PostgreSQL for PAM-enabled appliations

pkgs.pamtester

Utility program to test the PAM facility

  • nixos-unstable -

pkgs.pam_ccreds

PAM module to locally authenticate using an enterprise identity when the network is unavailable

  • nixos-unstable -
    • nixpkgs-unstable 10

pkgs.pam_mktemp

PAM for login service to provide per-user private directories

  • nixos-unstable -

pkgs.pam_rundir

Provide user runtime directory on Linux systems

  • nixos-unstable -

pkgs.pam_tmpdir

PAM module for creating safe per-user temporary directories

  • nixos-unstable -

pkgs.apparmor-pam

Mandatory access control system - PAM service

  • nixos-unstable -

pkgs.opam-publish

Tool to ease contributions to opam repositories

  • nixos-unstable -

pkgs.pam-reattach

Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)

  • nixos-unstable -

pkgs.nss_pam_ldapd

LDAP identity and authentication for NSS/PAM

  • nixos-unstable -

pkgs.opam-installer

Handle (un)installation from opam install files

  • nixos-unstable -

pkgs.pam-honeycreds

PAM module that sends warnings when fake passwords are used

  • nixos-unstable -

pkgs.rspamd-trainer

Grabs messages from a spam mailbox via IMAP and feeds them to Rspamd for training

Package maintainers