<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: lsh</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-0353: unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows l</title><link>https://patchthecve.com/cve/CVE-2006-0353.html</link><guid>https://patchthecve.com/cve/CVE-2006-0353.html</guid><pubDate>Tue, 16 Jun 2026 22:20:25 +0000</pubDate><description>LOW 3.6: unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys.</description></item><item><title>CVE-2005-0814: Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denia</title><link>https://patchthecve.com/cve/CVE-2005-0814.html</link><guid>https://patchthecve.com/cve/CVE-2005-0814.html</guid><pubDate>Tue, 16 Jun 2026 22:11:49 +0000</pubDate><description>MEDIUM 5.0: Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vectors.</description></item><item><title>CVE-2003-0826: lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, </title><link>https://patchthecve.com/cve/CVE-2003-0826.html</link><guid>https://patchthecve.com/cve/CVE-2003-0826.html</guid><pubDate>Tue, 16 Jun 2026 22:03:01 +0000</pubDate><description>HIGH 7.5: lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.</description></item></channel></rss>