CLSA-2025-1764696522 libssh: Fix of 2 CVEs

🗓️ 02 Dec 2025 17:28:46Reported by GoogleType

osv

osv🔗 osv.dev👁 7 Views

Libssh fixes two CVEs: fix ssh_kdf return handling and ChaCha20 initialization error detection.

Reporter	Title	Published	Views	Family All 257
IBM Security Bulletins	Security Bulletin: Muliple security vulnerabilities found in IBM CICS TX Standard.	22 Apr 202614:23	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	25 Feb 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: Enumeration of users, compromised data confidentiality and integrity, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	23 Mar 202616:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.17.0 shipped with IBM Cloud Pak for Business Automation iFixes for April 2026	27 May 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libssh library (CVE-2025-5372) affects Power HMC.	6 Apr 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	9 Feb 202614:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities found in the Red Hat Universal Minimal Base Image shipped with CICS Transaction Gateway for Multiplatforms	26 Jan 202609:58	–	ibm
ATTACKERKB	CVE-2025-5372	4 Jul 202506:15	–	attackerkb
ATTACKERKB	CVE-2025-5987	7 Jul 202514:24	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2025-1155)	8 Sep 202500:00	–	nessus

Source	Link
errata	www.errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1764696522.html

01 Jun 2026 00:32Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.1 - 8.8

EPSS0.0144

SSVC

ssh_kdf return chaCha20 initialization cipher initialization error