Affected: AlmaLinux:10: libssh, AlmaLinux:10: libssh-config, AlmaLinux:10: libssh-devel

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842) * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843) * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844) * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845) * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846) * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847) * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848) * libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849) * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850) * libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851) * libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected: Alpaquita:stream: libssh

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

libssh: libssh: information disclosure via short GSSAPI Curve25519 public key libssh: libssh: denial of service via zero advertised channel packet size libssh: libssh: denial of service via oversized SFTP read length libssh: libssh: denial of service via unchecked ProxyCommand fork() failure libssh: libssh: information disclosure via ProxyCommand %r username expansion libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification libssh: libssh: denial of service via SFTP responses with unknown request IDs libssh: libssh: denial of service via automatic certificate authentication loop libssh: libssh: use-after-free via data callbacks on closed channels libssh: libssh: authentication bypass via missing GSSAPI principal check

security update for libssh

Affected: Rocky Linux:10: libssh

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842)

* libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

* libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

* libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

* libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

* libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

* libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

* libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849)

* libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

* libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851)

* libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:Pro:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh, Ubuntu:24.04:LTS: libssh, Ubuntu:26.04:LTS: libssh

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

Ein Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Angriff auszulösen und Daten zu manipulieren.