CVE-2026-35388

Publication date 3 April 2026

Last updated 3 April 2026


Ubuntu priority

Description

(OpenSSH before 10.3 omits connection multiplexing confirmation for pro ...)

Read the notes from the security team

Status

Package Ubuntu Release Status
openssh 25.10 questing
Needs evaluation
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation
16.04 LTS xenial
Needs evaluation
14.04 LTS trusty
Needs evaluation
openssh-ssh1 25.10 questing Ignored
24.04 LTS noble Ignored
22.04 LTS jammy Ignored
20.04 LTS focal Ignored
18.04 LTS bionic Ignored

Notes


mdeslaur

openssh-ssh1 is only provided for compatibility with old devices that cannot be upgraded to modern protocols. We will not be providing any security support for the openssh-ssh1 package as it is insecure and should be used in trusted environments only.


Access our resources on patching vulnerabilities