CVE details
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.
- Score
- 2.5 low
- Published
- 2026-10-06
- Links
- NVD · cve.org · Report wrong data
Matched ports (3)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/openssh-portable | openssh-portable | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-gssapi | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-hpn | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |