openssh-askpass-gnome (SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE package openssh-askpass-gnome, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-35385 — CVSS 7.5 (high): In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the…
• CVE-2026-35414 — CVSS 4.2 (medium): OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with…