Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
SUSE-SU-2026:1876-1
See a problem?
Please try reporting it
to the source
first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261876-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1876-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1876-1
Upstream
CVE (2)
CVE-2026-35385
CVE-2026-35414
Related
CVE (2)
CVE-2026-35385
CVE-2026-35414
Published
2026-05-15T22:06:51Z
Modified
2026-05-19T18:23:46Z
Summary
Security update for openssh
Details
This update for openssh fixes the following issues
CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427).
CVE-2026-35414: mishandling of authorized_keys principals option (bsc#1261430).
References
https://www.suse.com/support/update/announcement/2026/suse-su-20261876-1/
https://bugzilla.suse.com/1261427
https://bugzilla.suse.com/1261430
https://www.suse.com/security/cve/CVE-2026-35385
https://www.suse.com/security/cve/CVE-2026-35414
Affected packages
SUSE-SU-2026:1876-1 - OSV