Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
OpenSSH may allow limited security bypass
published 9 months ago
Summary
The OpenSSH package from the Echo project has a flaw that could let an attacker slightly bypass some security checks, but the impact is very small. Developers say a proper fix would break existing workflows, so no patch will be released. Keep your OpenSSH version up to date and consider alternative authentication methods if you need stronger protection.
What to do
- Update echo openssh to version 1:9.2p1-2+deb12u6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | openssh |
< 1:9.2p1-2+deb12u6 Fix: upgrade to 1:9.2p1-2+deb12u6
|
Original advisory text
This vulnerability is considered negligible, and upstream maintainers stated
a fix is impossible without breaking existing workflows.
https://security-tracker.debian.org/tracker/CVE-2020-15778
https://github.com/cpandya2909/CVE-2020-15778
References
Timeline
Published29 Jan 2026
Updated15 Sep 2026
First seen15 Sep 2026
Sources
ECHO-d89c-9245-720b · OSV
Track software like this
Free during beta