{"action":"Upgrade openssh to 1:7.2p2-3 or later.","affected":[{"fixed":"1:7.2p2-3","introduced":"0"}],"component":"openssh","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:7.2p2-3"],"id":"tcs_01M5NBAM307SSE5Q12SMS65R2Q","modified_at":"2026-09-09T07:01:41.889314124Z","published_at":"2016-05-01T01:59:00.143Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-8325","https://security-tracker.debian.org/tracker/CVE-2015-8325"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-8325","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-8325"}],"summary":"The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows loca"}