CVE-2026-3497: Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshp…

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshp…

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

openssh

https://launchpad.net/ubuntu/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unaffected",
                    "product": "openssh",
                    "vendor": "Ubuntu",
                    "collectionURL": "https://launchpad.net/ubuntu/",
                    "packageName": "openssh",
                    "repo": "https://launchpad.net/ubuntu/+source/openssh",
                    "versions": [
                        {
                            "lessThan": "1:10.0p1-5ubuntu5.1",
                            "status": "affected",
                            "version": "1:10.0p1-5ubuntu5",
                            "versionType": "dpkg"
                        },
                        {
                            "lessThan": "1:9.6p1-3ubuntu13.15",
                            "status": "affected",
                            "version": "1:9.6p1-3ubuntu13",
                            "versionType": "dpkg"
                        },
                        {
                            "lessThan": "1:8.9p1-3ubuntu0.14",
                            "status": "affected",
                            "version": "1:8.9p1-3",
                            "versionType": "dpkg"
                        }
                    ]
                }

cve-program · CVE-2026-3497

openssh