Red Hat Security Advisory

RHSA-2025:23484

libssh security update

Released 2025-12-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) libssh-devel-0.11.1-5.el10_1
Red Hat Enterprise Linux BaseOS (v. 10) libssh-0.11.1-5.el10_1, libssh-config-0.11.1-5.el10_1

TI-2025-05409 CVE-2025-5987 · GHSA-3pvj-q7qj-89fg

MEDIUM 41

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0173 Published 2025-07-07 Partial fix · 0.11.2, 0.11.1-5.el10_1 +13 CWE-393