Affected: Alpaquita:stream: openssh, BellSoft Hardened Containers:stream: openssh

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur.

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur.

openssh-9.6p1-11.1 on GA media

Security update for openssh

Affected: Ubuntu:24.04:LTS: openssh

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur.

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution Excessive time spent checking DSA keys and parameters Unbounded memory growth with session handling in TLSv1.3

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um Informationen offenzulegen.