Security update for openssh

This update for openssh fixes the following issues CVE-2026-3497: information disclosure or denial of service due to uninitialized variables bsc1259642. CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid bsc1261427. CVE-2026-35388: omitted connection multiplexing...

The vulnerability of the FilenameHandler component in the scp.c file of the SSH session management software package Dropbear allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FilenameHandler component in the scp.c file of the SSH session management software package is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected...

Delta Industrial Automation ASDA-Soft SCP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...