Bug#1132576: openssh: CVE-2026-35414

Salvatore Bonaccorso <[email protected]> Fri, 1 May 2026 16:44:29 +0200

Newsgroups	gmane.linux.debian.devel.ssh
Message-ID	<afS8TU_cOP9mJtwQ__20272.9377824411$1777646847$gmane$org@eldamar.lan>

Hi,

On Thu, Apr 30, 2026 at 11:25:02AM +0100, Julian Gilbey wrote:
> Hi!
> 
> Surely this bug also affects stable, oldstable, ... and should be
> fixed there via a security update too?  It doesn't appear to have
> been.

Not via DSA, we tagged it no-dsa already. But a fix can go in (ideally
with the other open CVEs marked no-dsa) in a upcoming point release.
One is just around the corner, but I do not know if Colin has time for
that.

Regards,
Salvatore