This update for openssh fixes the following issues:
- CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044).
- CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended target directory
(bsc#1271046).
- CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048).
- CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory
(bsc#1271049).
- CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052).
- CVE-2026-600
This update for openssh fixes the following issues:
- CVE-2026-35388: Added missing askpass check for proxy-mode multiplexing sessions (bsc#1261441)
- CVE-2026-3497: Fixed a possible information disclosure or denial
of service due to uninitialized variables in gssapi patches
(bsc#1259642)
- Add patch to fix a potential issue when validating mac or ciphers
This update for openssh fixes the following issues:
- CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198).
- CVE-2025-61985: code execution via '\0' character in ssh: // URI when a ProxyCommand is used (bsc#1251199).
This update for openssh fixes the following issues:
Security issues fixed:
- CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040)
- CVE-2025-26466: Fixed a DoS attack against OpenSSH's client and server (bsc#1237041)
Other issues fixed:
- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
due to gssapi proposal not being correctly initialized
(bsc#1236826).
- Add a patch to fix a regression introduced in 9.6 that makes X11
forwarding very slow. (bsc#1229449)
- Fixed RFC4256 implementation so that keyboard-interactive authentication method can send
instructions and sshd sho