https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 14:31:37 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-110923 <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-110923 https://vulnerability.circl.lu/vuln/ghsa-cv5v-cq2q-vv46 <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> https://vulnerability.circl.lu/vuln/ghsa-cv5v-cq2q-vv46 https://vulnerability.circl.lu/vuln/msrc_cve-2026-110923 msrc_CVE-2026-110923 https://vulnerability.circl.lu/vuln/msrc_cve-2026-110923 https://vulnerability.circl.lu/vuln/rhsa-2026:82247 <p>openssh: openssh: Arbitrary file write via directory traversal during sftp recursive copy openssh: openssh: Information disclosure via shared compression side-channel openssh: openssh: Command injection via unvalidated command-line username openssh: openssh: Incorrect certificate expiration times via Daylight Saving Time mishandling openssh: openssh: Denial of service via oversized decompressed packets openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding openssh: OpenSSH: Improper access control via misinterpretation of disabled configuration options openssh: openssh: sftp can write outside the destination directory from a server-supplied path openssh: openssh: &#39;$&#39; and &#39;\&#39; in a command-line username expand through %u openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels openssh: openssh: a compressed payload can expand past the maximum packet size</p> <p>openssh: openssh: Arbitrary file write via directory traversal during sftp recursive copy openssh: openssh: Information disclosure via shared compression side-channel openssh: openssh: Command injection via unvalidated command-line username openssh: openssh: Incorrect certificate expiration times via Daylight Saving Time mishandling openssh: openssh: Denial of service via oversized decompressed packets openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding openssh: OpenSSH: Improper access control via misinterpretation of disabled configuration options openssh: openssh: sftp can write outside the destination directory from a server-supplied path openssh: openssh: &#39;$&#39; and &#39;\&#39; in a command-line username expand through %u openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels openssh: openssh: a compressed payload can expand past the maximum packet size</p> https://vulnerability.circl.lu/vuln/rhsa-2026:82247 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-110923 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS-updates:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1 and 14 more</p> <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS-updates:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1 and 14 more</p> <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-110923