SSH server OpenSSH of AlmaLinux 8, 9, 10, the current Fedora, Ubuntu 24.04 and 26.04 LTS: vendors' repositories and advisories
all quiet — no new OpenSSH builds in 24 h; last 7 days: 1
yellow bar — appeared in the last 24 hours · red — a red rating
Critical · urgent · major — the vendor's top rating, or no rating while CVEs are listed: red pill and barImportant · high · medium — the vendor's second ratingModerate · medium · low — the vendor's other ratingsthe rating is the vendor's: AlmaLinux Critical / Important / Moderate, Low; Fedora and EPEL urgent / high / medium, low; Ubuntu (USN OVAL) Critical / High / Medium, Low; nginx.org major / medium / low; modules — CVSS from the CVE record critical / high / medium, low; PowerDNS Critical, High / Medium / LowUbuntu pockets: proposed — published for testing, updates — released, security — released as a security fix
304AlmaLinux 8 · openssh-server · BaseOS · checked · changed method conditional GET of the BaseOS repomd.xml (the kernel's one; read once per run) → on change: the Packages/ listing (when the openssh-server file appeared); updateinfo.xml.gz (advisory, rating, CVEs) — when a new build appeared, a build of the last 30 days waits for its advisory, or once a day · rule every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): builds from the advisories, time from the file's Last-Modified
304AlmaLinux 9 · openssh-server · BaseOS · checked · changed method conditional GET of the BaseOS repomd.xml (the kernel's one; read once per run) → on change: the Packages/ listing (when the openssh-server file appeared); updateinfo.xml.gz (advisory, rating, CVEs) — when a new build appeared, a build of the last 30 days waits for its advisory, or once a day · rule every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): builds from the advisories, time from the file's Last-Modified
304AlmaLinux 10 · openssh-server · BaseOS · checked · changed method conditional GET of the BaseOS repomd.xml (the kernel's one; read once per run) → on change: the Packages/ listing (when the openssh-server file appeared); updateinfo.xml.gz (advisory, rating, CVEs) — when a new build appeared, a build of the last 30 days waits for its advisory, or once a day · rule every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): builds from the advisories, time from the file's Last-Modified
unchangedFedora · current release (Bodhi) · checked · changed method GET → JSON parsing; current is the newest Fedora release in state current · rule every 6 h
okFedora · openssh updates (Bodhi) · checked · changed method Bodhi API: updates of package openssh for the current release — when it entered testing and stable, type, rating, CVEs · rule every 15 min; Bodhi is down — the Packages/o/ listing of the repositories on Fedora mirrors
okUbuntu 24.04 LTS · openssh · Launchpad · checked · changed method Launchpad API (getPublishedSources): when the openssh source was published in proposed, updates and security, its status · rule every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
okUbuntu · OpenSSH notices (USN) · checked · changed method the notices RSS → JSON of new OpenSSH notices → USN number, date, CVEs for the source version · rule every 30 min; the first time — 2 pages of notices.json per release; the rating comes from the USN OVAL
304Ubuntu noble · notice ratings (USN OVAL) · checked · changed method conditional GET of the release's USN OVAL (bz2) → Ubuntu's rating of every notice (Critical, High, Medium, Low) · rule every 6 h; ~1.3 MB, only when changed; shared by kernels and nginx
okUbuntu 26.04 LTS · openssh · Launchpad · checked · changed method Launchpad API (getPublishedSources): when the openssh source was published in proposed, updates and security, its status · rule every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
okUbuntu · OpenSSH notices (USN) · checked · changed method the notices RSS → JSON of new OpenSSH notices → USN number, date, CVEs for the source version · rule every 30 min; the first time — 2 pages of notices.json per release; the rating comes from the USN OVAL
304Ubuntu resolute · notice ratings (USN OVAL) · checked · changed method conditional GET of the release's USN OVAL (bz2) → Ubuntu's rating of every notice (Critical, High, Medium, Low) · rule every 6 h; ~1.3 MB, only when changed; shared by kernels and nginx
conditional GET of the BaseOS repomd.xml (the kernel's one; read once per run) → on change: the Packages/ listing (when the openssh-server file appeared); updateinfo.xml.gz (advisory, rating, CVEs) — when a new build appeared, a build of the last 30 days waits for its advisory, or once a day
every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): builds from the advisories, time from the file's Last-Modified
conditional GET of the BaseOS repomd.xml (the kernel's one; read once per run) → on change: the Packages/ listing (when the openssh-server file appeared); updateinfo.xml.gz (advisory, rating, CVEs) — when a new build appeared, a build of the last 30 days waits for its advisory, or once a day
every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): builds from the advisories, time from the file's Last-Modified
conditional GET of the BaseOS repomd.xml (the kernel's one; read once per run) → on change: the Packages/ listing (when the openssh-server file appeared); updateinfo.xml.gz (advisory, rating, CVEs) — when a new build appeared, a build of the last 30 days waits for its advisory, or once a day
every 5 min; the official repository is down — AlmaLinux mirrors from the mirrorlist (https only, revision not older than already seen): builds from the advisories, time from the file's Last-Modified
Launchpad API (getPublishedSources): when the openssh source was published in proposed, updates and security, its status
every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
Launchpad API (getPublishedSources): when the openssh source was published in proposed, updates and security, its status
every 15 min; the first time — a year of history; Launchpad is down — the archive's Release and Sources.xz (archive.ubuntu.com, security.ubuntu.com; sha256 from Release): a new kernel shows up with the Release time
vigil