[ALSA-2026:62217] Moderate: libssh security update
Type:
security
Severity:
moderate
Release date:
2026-09-02
Description:
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libssh-0.10.4-19.el9_8.aarch64.rpm 06059085d9d85dc4b87b31c5dc4141e1440d80989b5384e54fa29739f8b86f39
aarch64 libssh-devel-0.10.4-19.el9_8.aarch64.rpm d622efa8f625d3e649f3053b161c51ff8b42b3cd15efe7c389d3b88536721ab8
i686 libssh-devel-0.10.4-19.el9_8.i686.rpm 1da4397cbe56f5301b463e0a7c0b0581e20b62aebcc4704e97fed80447ff0adb
i686 libssh-0.10.4-19.el9_8.i686.rpm 2f90958857ef6277400f9c46303441319b8179fe27c4190cb4546357fe522a1f
noarch libssh-config-0.10.4-19.el9_8.noarch.rpm 4e14165163b183983f51b5f3a00786ffbd7989e663b840f9bde278bc05430bb1
ppc64le libssh-0.10.4-19.el9_8.ppc64le.rpm 18ba4158b7ac930d42fa4f2f8197c363027555d9b12102ff9330714457d19307
ppc64le libssh-devel-0.10.4-19.el9_8.ppc64le.rpm 7f828cdfc64e26b2db0446637b7b52d8e1586fdae91c46e708bad469ef7c3982
s390x libssh-devel-0.10.4-19.el9_8.s390x.rpm 082cd09673c7852b7f7e40cee198475a1f0b8265fa1295d36c3a6d4aa2e4bc12
s390x libssh-0.10.4-19.el9_8.s390x.rpm 36d74fb2d84ecad896ed613cda391a6985f4db78ba90b3ddb5633d0c9394442d
x86_64 libssh-0.10.4-19.el9_8.x86_64.rpm ac64c87e5f70d2b6dc849a08db775137322d2c7bb1e2225bb8d15942dc23053a
x86_64 libssh-devel-0.10.4-19.el9_8.x86_64.rpm cb8ad51b9067e81c2529c2f2d1cdaa21858bb0eae35aa17158231b5a05507840
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.