Moderate: Red Hat Security Advisory: libssh security update

🗓️ 10 Dec 2025 10:23:22Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 4 Views

Moderate security update for libssh fixing incorrect return code handling in ssh_kdf.

Reporter	Title	Published	Views	Family All 164
IBM Security Bulletins	Security Bulletin: Muliple security vulnerabilities found in IBM CICS TX Standard.	22 Apr 202614:23	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	25 Feb 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.17.0 shipped with IBM Cloud Pak for Business Automation iFixes for April 2026	27 May 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libssh library (CVE-2025-5372) affects Power HMC.	6 Apr 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	9 Feb 202614:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities found in the Red Hat Universal Minimal Base Image shipped with CICS Transaction Gateway for Multiplatforms	26 Jan 202609:58	–	ibm
ATTACKERKB	CVE-2025-5372	4 Jul 202506:15	–	attackerkb
Tenable Nessus	Alibaba Cloud Linux 3 : 0189: libssh (ALINUX3-SA-2025:0189)	3 Dec 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libssh (ALSA-2025:21977)	3 Dec 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: libssh (CVE-2025-5372)	19 Jul 202500:00	–	nessus

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

08 Jun 2026 02:13Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15 - 8.8

EPSS0.00246

SSVC

libssh ssh_kdf return code handling CVE-2025-5372 security update