Description
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | btrbk | 0.27.1-2 | — |
| Debian 13 | btrbk | 0.27.1-2 | — |
| Debian 12 | btrbk | 0.27.1-2 | — |
| Debian 9 | btrbk | 0.24.0-1+deb9u1 | DLA-2755-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | btrbk | 0.27.1-1ubuntu0.1~esm1 | USN-9049-1 |
| Ubuntu Pro 18.04 LTS | btrbk | 0.26.0-1ubuntu0.1~esm1 | USN-9049-1 |
Advisories 2
- USN-9049-1 btrbk vulnerability Ubuntu Security Notices (USN) · Nov 12, 2026
- DLA-2755-1 btrbk - security update Debian Security (DSA / DLA) · Mar 9, 2026
References
- https://github.com/digint/btrbk/commit/58212de771c381cd4fa05625927080bf264e9584
- https://github.com/digint/btrbk/blob/master/ChangeLog
- [debian-lts-announce] 20210905 [SECURITY] [DLA 2755-1] btrbk security update mailing-list
- FEDORA-2022-dc62389784 vendor-advisory
- FEDORA-2022-a66734e7a2 vendor-advisory