Description:
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.
Security Fix(es):
* libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966)
* libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964)
* libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965)
* libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967)
* libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
libssh-0.12.0-2.el10.aarch64.rpm |
047c4f1539fbef35fcdef2cacd407e9afcc8a439ac36b5d1b2a7587b606e3f2d |
| aarch64 |
libssh-devel-0.12.0-2.el10.aarch64.rpm |
bee69410179120b2d2baf974a4433d2c54693a639d7f4cad2f251e02b4b62910 |
| noarch |
libssh-config-0.12.0-2.el10.noarch.rpm |
c135864c89e79627744281f8c685d0a001a881683e217ae1e018d595ac7a2ed6 |
| ppc64le |
libssh-0.12.0-2.el10.ppc64le.rpm |
661adf9e7d7695e8cb9558ebd5e6a57fcfad450c20a2a1683fb7b82b1e6cc9ca |
| ppc64le |
libssh-devel-0.12.0-2.el10.ppc64le.rpm |
e48f9e05094958b88cdf60c71ad84947d8c308889a3fead29b92b16b0ecd3849 |
| s390x |
libssh-devel-0.12.0-2.el10.s390x.rpm |
721bab56a2867eafceaac56e88458c10956e701f9f57faec2d96c3505dd165be |
| s390x |
libssh-0.12.0-2.el10.s390x.rpm |
f1b5f6920f448f284b0c0b46d524f2099b32013fbf15530e88b3c2ee7a21503d |
| x86_64 |
libssh-0.12.0-2.el10.x86_64.rpm |
8caf119f46bf8271ac0ee6a9e62988ed399c7fe0978a044ef7218681acf8ec37 |
| x86_64 |
libssh-devel-0.12.0-2.el10.x86_64.rpm |
c607b128073e57795ba7a576a747bb792f7ae6e9287cca7bc4488efeec45da7b |
| x86_64_v2 |
libssh-devel-0.12.0-2.el10.x86_64_v2.rpm |
9a924029044043e06690f1cd3c2851532acdab730fc6bd2e98a91c0687a774be |
| x86_64_v2 |
libssh-0.12.0-2.el10.x86_64_v2.rpm |
c96367464b677f983781b11df03e041beb29e2931362281b97643e8c668b972d |