OpenSSH flaw CVE-2026-35414

[MGH Systems Security]

Hi

I have been notified of this OpenSSH flaw
https://www.securityweek.com/openssh-flaw-allowing-full-root-shell-access-lurked-for-15-years/

Currently running PVE 9.1.7 across our estate and I see it is on OpenSSH 10.0

Are there any plans to update to the latest version as the fix for a root access violation is in 10.3 released April 2026

 

[Stubennerd]

PVE 9 and PBS 4 are based on Debian 13 'Trixie".
Debian will certainly release an update soon.

https://security-tracker.debian.org/tracker/CVE-2026-35414

 

[MGH Systems Security]

Thank you for the insight, still newish to Proxmox and this is the first "issue" that I have had to worry about