{"schemaVersion":3,"id":"USN-6279-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"openssh update\n\nIt was discovered that OpenSSH has an observable discrepancy leading to an\ninformation leak in the algorithm negotiation. This update mitigates the\nissue by tweaking the client hostkey preference ordering algorithm to\nprefer the default ordering if the user has a key that matches the\nbest-preference default algorithm.","dates":{"published":"2023-08-09T06:08:18.000Z","modified":"2026-06-29T13:50:55.624Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"openssh","name":"openssh","label":"openssh","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openssh","purlType":"deb","versions":[{"text":"< 1:6.6p1-2ubuntu2.13+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 1:7.2p2-4ubuntu2.10+esm4","noFixRecorded":false,"fixedIn":null},{"text":"< 1:7.6p1-4ubuntu0.7+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 1:8.2p1-4ubuntu0.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:6.6p1-2ubuntu2.13+esm2 | < 1:7.2p2-4ubuntu2.10+esm4 | < 1:7.6p1-4ubuntu0.7+esm2 | < 1:8.2p1-4ubuntu0.9","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6279-1","label":"ubuntu.com/security/notices/USN-6279-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://launchpad.net/bugs/2030275","label":"launchpad.net/bugs/2030275","hostname":"launchpad.net","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CVE-2020-14145"]},"timeline":[{"kind":"published","date":"2023-08-09T06:08:18.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T13:50:55.624Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:24:49.146Z","stale":false,"partial":false}}