Skip to content
OpenAdvisories
Medium DSA-6086-1 1 CVE

dropbear - security update

Published Dec 19, 2025 · Updated Dec 19, 2025

Fixed packages 1

ReleasePackageFixed in
Debian · 13 dropbear 2025.89-1~deb13u1

Vulnerabilities 1

  • Medium 5.4

    Dropbear: privilege escalation via unix domain socket forwardings

    A flaw was found in Dropbear. When running in multi-user mode and authenticating users, the dropbear ssh server does the socket forwardings requested by the remote client as root, only switching to the logged-in user upon spawning a shell or performing some o…