[ubuntu/noble-security] openssh 1:9.6p1-3ubuntu13.18 (Accepted)

[Marc Deslauriers]

openssh (1:9.6p1-3ubuntu13.18) noble-security; urgency=medium

  * SECURITY UPDATE: sftp downloaded files location issue
    - debian/patches/CVE-2026-59995.patch: upstream: avoid download to server-
      controlled path when performing in sftp.c.
    - CVE-2026-59995
  * SECURITY UPDATE: scp parent directory issue
    - debian/patches/CVE-2026-59996.patch: upstream: resist that return ".." via
      remote glob during in scp.c.
    - CVE-2026-59996
  * SECURITY UPDATE: internal-sftp ignores more than 9 commandline args
    - debian/patches/CVE-2026-59997.patch: upstream: pass >9 commandline
      arguments to the internal-sftp server, in session.c.
    - CVE-2026-59997
  * SECURITY UPDATE: undocumented GSSAPIStrictAcceptorCheck behaviour
    - debian/patches/CVE-2026-59998.patch: upstream: mention a caveat regarding
      GSSAPIStrictAcceptorCheck in in sshd_config.5.
    - CVE-2026-59998
  * SECURITY UPDATE: DisableForwarding=yes not taking proper precedence
    - debian/patches/CVE-2026-59999.patch: upstream: DisableForwarding=yes
      didn't override PermitTunnel=yes in serverloop.c.
    - CVE-2026-59999
  * SECURITY UPDATE: DoS via MaxAuthTries mishandling
    - debian/patches/CVE-2026-60000-1.patch: upstream: Fix multiple RFC 4462
      (GSSAPIAuthentication) compliance in auth2-gss.c.
    - debian/patches/CVE-2026-60000-2.patch: upstream: unused variables in
      auth2-gss.c.
    - CVE-2026-60000
  * SECURITY UPDATE: minimum authentication delay not always honoured
    - debian/patches/CVE-2026-60001.patch: upstream: Fix cases in GSSAPI and
      keyboard-interactive in auth.h, auth2-chall.c, auth2-gss.c, auth2.c.
    - CVE-2026-60001
  * SECURITY UPDATE: Use-after-free during a key re-exchange
    - debian/patches/CVE-2026-60002.patch: upstream: fix ownership and lifetime
      of several bits of client in ssh.c, sshconnect.c, sshconnect.h,
      sshconnect2.c.
    - CVE-2026-60002

openssh (1:9.6p1-3ubuntu13.17) noble; urgency=medium

  * d/openssh-server.postinst: unmask ssh.socket when migrating to socket
    activation (LP: #2109759)

Date: 2026-07-09 21:38:13.344473+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/openssh/1:9.6p1-3ubuntu13.18
-------------- next part --------------
Sorry, changesfile not available.