Collected every two hours from specialised publications — each link leads to the original article.
CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode CVE-2026-35388: Add connection multiplexing confirmation for …
CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode CVE-2026-35388: Add connection multiplexing confirmation for …
CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex
CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex
CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex
Added fixes for CVE-2025-61985 and CVE-2025-61984
* bsc#1251198 * bsc#1251199 Cross-References: * CVE-2025-61984
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.
An update that solves two vulnerabilities can now be installed.
* bsc#1251198 * bsc#1251199 Cross-References: * CVE-2025-61984
* bsc#1251198 Cross-References: * CVE-2025-61984
* bsc#1251198 * bsc#1251199 Cross-References: * CVE-2025-61984
* bsc#1251198 * bsc#1251199 Cross-References: * CVE-2025-61984
An update that solves two vulnerabilities can now be installed.
Fixes CVE-2025-32728
Fixes CVE-2025-32728
Machine-in-the-middle attack vulnerability if verifyhostkeydns is enabled. (CVE-2025-26465) References: - https://bugs.mageia.org/show_bug.cgi?id=34036
* bsc#1237040 * bsc#1237041 Cross-References: * CVE-2025-26465
* bsc#1226642 Cross-References: * CVE-2024-6387
Backport fix for CVE-2024-6387 (rhbz#2294879)
* bsc#1226642 Cross-References: * CVE-2024-6387
* bsc#1218215 Cross-References: * CVE-2023-51385
* bsc#1218215 * bsc#1220110 Cross-References: * CVE-2023-51385
* bsc#1218215 Cross-References: * CVE-2023-51385