StackPatch is live — managed CVE patch ops for indie SaaS, from $9/mo. 14-day free trial, no card.See product

Back to CVE digest

Package · openssh

`openssh` CVE matrix across Linux distros

379 CVEs tracked across 13 distro releases. Showing the 200 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixieUbuntu jammyUbuntu nobleUbuntu questingUbuntu resoluteUbuntu xenial

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2000-0992→ fixed in1:3.9p1-1
CVE-2001-1459→ fixed in1:3.0.1p1-1
CVE-2001-1507→ fixed in1:3.0.1
CVE-2002-0639→ fixed in1:3.4
CVE-2002-0640→ fixed in1:3.4
CVE-2002-0765→ fixed in1:3.3p1-0.0woody1
CVE-2003-0190→ fixed in1:3.8.1p1-8.sarge.4
CVE-2003-0386→ fixed in1:3.8p1-1
+52 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y openssh

Debian bookworm

Source: Debian

CVE-2000-0992→ fixed in1:3.9p1-1
CVE-2001-1459→ fixed in1:3.0.1p1-1
CVE-2001-1507→ fixed in1:3.0.1
CVE-2002-0639→ fixed in1:3.4
CVE-2002-0640→ fixed in1:3.4
CVE-2002-0765→ fixed in1:3.3p1-0.0woody1
CVE-2003-0190→ fixed in1:3.8.1p1-8.sarge.4
CVE-2003-0386→ fixed in1:3.8p1-1
+52 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y openssh

Debian trixie

Source: Debian

CVE-2000-0992→ fixed in1:3.9p1-1
CVE-2001-1459→ fixed in1:3.0.1p1-1
CVE-2001-1507→ fixed in1:3.0.1
CVE-2002-0639→ fixed in1:3.4
CVE-2002-0640→ fixed in1:3.4
CVE-2002-0765→ fixed in1:3.3p1-0.0woody1
CVE-2003-0190→ fixed in1:3.8.1p1-8.sarge.4
CVE-2003-0386→ fixed in1:3.8p1-1
+52 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y openssh

Alpine v3.20

Source: Alpine secdb

CVE-2016-10009→ fixed in7.4_p1-r0
CVE-2016-10010→ fixed in7.4_p1-r0
CVE-2016-10011→ fixed in7.4_p1-r0
CVE-2016-10012→ fixed in7.4_p1-r0

Single command to patch all of these:

apk add --upgrade openssh

Alpine v3.21

Source: Alpine secdb

CVE-2016-10009→ fixed in7.4_p1-r0
CVE-2016-10010→ fixed in7.4_p1-r0
CVE-2016-10011→ fixed in7.4_p1-r0
CVE-2016-10012→ fixed in7.4_p1-r0

Single command to patch all of these:

apk add --upgrade openssh

Alpine edge

Source: Alpine secdb

CVE-2016-10009→ fixed in7.4_p1-r0
CVE-2016-10010→ fixed in7.4_p1-r0
CVE-2016-10011→ fixed in7.4_p1-r0
CVE-2016-10012→ fixed in7.4_p1-r0

Single command to patch all of these:

apk add --upgrade openssh

Alpine v3.18

Source: Alpine secdb

CVE-2016-10009→ fixed in7.4_p1-r0
CVE-2016-10010→ fixed in7.4_p1-r0
CVE-2016-10011→ fixed in7.4_p1-r0
CVE-2016-10012→ fixed in7.4_p1-r0

Single command to patch all of these:

apk add --upgrade openssh

Alpine v3.19

Source: Alpine secdb

CVE-2016-10009→ fixed in7.4_p1-r0
CVE-2016-10010→ fixed in7.4_p1-r0
CVE-2016-10011→ fixed in7.4_p1-r0
CVE-2016-10012→ fixed in7.4_p1-r0

Single command to patch all of these:

apk add --upgrade openssh

Is YOUR openssh patched?

5-second check on your actual server. The quickscan reads your installed openssh version and matches against the same 379-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring (from $9/mo)