Red Hat Security Advisory

RHSA-2026:55855

libssh security update

Released 2026-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) libssh-devel-0.12.0-3.el10_2
Red Hat Enterprise Linux BaseOS (v. 10) libssh-0.12.0-3.el10_2, libssh-config-0.12.0-3.el10_2

Fixes 11 records

TI-2026-42667 CVE-2026-59851 · GHSA-x5cr-v39m-53gw

Libssh: libssh: authentication bypass via missing gssapi principal check

MEDIUM 41

A flaw was found in libssh.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00489 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-863

TI-2026-42663 CVE-2026-59847 · GHSA-mq2j-7vq4-77m8

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

LOW 39

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00332 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-253

TI-2026-42666 CVE-2026-59850 · GHSA-cr6p-6527-344m

Libssh: libssh: use-after-free via data callbacks on closed channels

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-416

TI-2026-42665 CVE-2026-59849 · GHSA-jp6g-7mqj-wj53

Libssh: libssh: denial of service via automatic certificate authentication loop

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00438 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-835

TI-2026-12931 CVE-2026-15370 · GHSA-6j7f-8jjp-mm8c

Libssh: libssh: stack buffer overflow in sftp server longname construction

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00168 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.2-1.hum1 CWE-121

TI-2026-42664 CVE-2026-59848 · GHSA-4h4r-q9xg-gfmm

Libssh: libssh: denial of service via sftp responses with unknown request ids

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00341 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-770

TI-2026-42660 CVE-2026-59844 · GHSA-qp28-hpg5-j7xc

Libssh: libssh: denial of service via oversized sftp read length

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00567 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-789

TI-2026-42659 CVE-2026-59843 · GHSA-4846-7xwg-pw5m

Libssh: libssh: denial of service via zero advertised channel packet size

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00567 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-835

TI-2026-42661 CVE-2026-59845 · GHSA-97fp-2vw9-q5jg

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

LOW 25

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00104 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-390

TI-2026-42658 CVE-2026-59842 · GHSA-x94w-cg8g-g593

Libssh: libssh: information disclosure via short gssapi curve25519 public key

LOW 25

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00493 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-125

TI-2026-42662 CVE-2026-59846 · GHSA-fvwj-j79q-57v7

Libssh: libssh: information disclosure via proxycommand %r username expansion

LOW 17

A flaw was found in libssh.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.0012 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-78