[ALSA-2026:62218] Moderate: libssh security update
Type:
security
Severity:
moderate
Release date:
2026-09-02
Description:
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libssh-devel-0.9.6-17.el8_10.aarch64.rpm 79cb213daded48101d36b3d8017695f9023ad0e6771cc5928e5aaaad60211685
aarch64 libssh-0.9.6-17.el8_10.aarch64.rpm 995a7106fd881ab8f6e1df291b8d11300b8f09656af193b90451b689e9eb5c9d
i686 libssh-0.9.6-17.el8_10.i686.rpm 82333308b431606b316a3578774c52b472abc572d164d709bd60689d4aa48312
i686 libssh-devel-0.9.6-17.el8_10.i686.rpm a6381b6be92474563cf20af16bd68a43721b92e2c686020de35e5bfd9c649b64
noarch libssh-config-0.9.6-17.el8_10.noarch.rpm a6f8fae4c3c4c00d3cf6ab181225ccc6d7563c83daa73931536af929cf9fc002
ppc64le libssh-devel-0.9.6-17.el8_10.ppc64le.rpm 741866077d09c23c0d365fcf25d7302629d0c048bacac00d836246c6f67c4bdd
ppc64le libssh-0.9.6-17.el8_10.ppc64le.rpm d5e6da3c4be5ee5654f2542c295a61cc96121423ddbf5d66d5bcf3e6153c6870
s390x libssh-devel-0.9.6-17.el8_10.s390x.rpm 2cd86deb9b25abd3b1705eb5729a0aeb1dccbb427b2d36ff16cf6c4a02b5068b
s390x libssh-0.9.6-17.el8_10.s390x.rpm 6231ce7826b2b9da12d36e57fcdf22cabd207416e1f1379cfb6a04bc71aa9c00
x86_64 libssh-0.9.6-17.el8_10.x86_64.rpm 3d82f558bca7198c88d89e7404ac13caa653e8de35118a1ba932304cd326db0a
x86_64 libssh-devel-0.9.6-17.el8_10.x86_64.rpm 719e75d58848063ac04100e855c0b1dfaa9249696a77a18344c008a75ecc6786
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.