USN-8533-1: OpenSSH vulnerabilities

«It was discovered that OpenSSH sftp did not properly constrain the location of downloaded files when connecting to an attacker-controlled server. An attacker could possibly use this issue to write files to unintended loc...»