{"schemaVersion":3,"id":"SUSE-SU-2026:3605-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for openssh\n\nThis update for openssh fixes the following issues:\n\n- Backported support for the mlkemx25519 key exchange from upstream (jsc#PED-16473).\n\n- CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with\n  an attacker-controlled server (bsc#1271044).\n- CVE-2026-59996: scp: file placed in the parent directory of an intended target directory when copy occurs between two\n  remote destinations (bsc#1271046).\n- CVE-2026-59997: sshd: `internal-sftp` command lines are silently truncated after the 9th argument (bsc#1271048).\n- CVE-2026-59998: sshd: undocumented security-relevant `GSSAPIStrictAcceptorCheck` behavior in Windows Active Directory\n  is not documented (bsc#1271049).\n- CVE-2026-59999: sshd: `DisableForwarding=yes` does not override `PermitTunnel=yes` (bsc#1271052).\n- CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053).\n- CVE-2026-60001: sshd: minimum authentication delay is not honored (bsc#1271054).\n- CVE-2026-60002: ssh: client-side use-after-free when a server changes its host key during a key reexchange\n  (bsc#1271055).","dates":{"published":"2026-08-13T06:35:44.000Z","modified":"2026-08-14T10:30:28.309Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"openssh-askpass-gnome&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7","name":"openssh-askpass-gnome","label":"openssh-askpass-gnome&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP7","purlType":"rpm","versions":[{"text":"< 9.6p1-150600.6.49.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.6p1-150600.6.49.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","name":"openssh-askpass-gnome","label":"openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","purlType":"rpm","versions":[{"text":"< 9.6p1-150600.6.49.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.6p1-150600.6.49.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","name":"openssh-askpass-gnome","label":"openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 9.6p1-150600.6.49.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.6p1-150600.6.49.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openssh&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","name":"openssh","label":"openssh&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openssh&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7","purlType":"rpm","versions":[{"text":"< 9.6p1-150600.6.49.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.6p1-150600.6.49.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openssh&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","name":"openssh","label":"openssh&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openssh&distro=SUSE Linux Enterprise Server 15 SP6-LTSS","purlType":"rpm","versions":[{"text":"< 9.6p1-150600.6.49.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.6p1-150600.6.49.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openssh&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","name":"openssh","label":"openssh&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openssh&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 9.6p1-150600.6.49.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.6p1-150600.6.49.1","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263605-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20263605-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1271044","label":"bugzilla.suse.com/1271044","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271046","label":"bugzilla.suse.com/1271046","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271048","label":"bugzilla.suse.com/1271048","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271049","label":"bugzilla.suse.com/1271049","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271052","label":"bugzilla.suse.com/1271052","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271053","label":"bugzilla.suse.com/1271053","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271054","label":"bugzilla.suse.com/1271054","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271055","label":"bugzilla.suse.com/1271055","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59995","label":"www.suse.com/security/cve/CVE-2026-59995","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59996","label":"www.suse.com/security/cve/CVE-2026-59996","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59997","label":"www.suse.com/security/cve/CVE-2026-59997","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59998","label":"www.suse.com/security/cve/CVE-2026-59998","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59999","label":"www.suse.com/security/cve/CVE-2026-59999","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60000","label":"www.suse.com/security/cve/CVE-2026-60000","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60001","label":"www.suse.com/security/cve/CVE-2026-60001","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-60002","label":"www.suse.com/security/cve/CVE-2026-60002","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2026-59995","CVE-2026-59996","CVE-2026-59997","CVE-2026-59998","CVE-2026-59999","CVE-2026-60000","CVE-2026-60001","CVE-2026-60002"],"downstream":[],"duplicates":[],"related":["CVE-2026-59995","CVE-2026-59996","CVE-2026-59997","CVE-2026-59998","CVE-2026-59999","CVE-2026-60000","CVE-2026-60001","CVE-2026-60002"]},"timeline":[{"kind":"published","date":"2026-08-13T06:35:44.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-14T10:30:28.309Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T16:48:33.085Z","stale":false,"partial":false}}