RHSA-2026:61752 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

TencentOS Server 4: rust (TSSA-2026:0951)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0951 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

libssh2: integer overflow via large username or password arguments

A flaw was found in the libssh2 library. A remote attacker can exploit an integer overflow vulnerability in the userauthpassword function by manipulating the usernamelen or passwordlen arguments and cause a heap-based buffer overflow. This leads to a crash to the application linked to the library...

libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...

libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation

A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution...

Important: Red Hat Security Advisory: libssh2 security update

An update for libssh2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

A flaw was found in libssh2. A malicious SSH Secure Shell server can exploit a double-free vulnerability in the sftpopen function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP SSH File Transfer Protocol session. This heap corruption can...

RHEL 7 : libssh2 (RHSA-2026:61752)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61752 advisory. The libssh2 packages provide a library that implements the SSH2 protocol. Security Fixes: libssh2: integer overflow via large username or...

Important: rust-cargo-c

Issue Overview: libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell...

Amazon Linux 2023 : cargo-c (ALAS2023-2026-2113)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2113 advisory. libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on a...

The vulnerability in the src/userauth.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to cause a service failure.

The vulnerability in the src/userauth.c component of the SSH2 protocol implementation library Libssh2 is related to errors in number processing. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROOT-OS-DEBIAN-12-CVE-2026-58050 CVE-2026-58050 in libssh2 - Patched by Root

Root has patched CVE-2026-58050 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-66032 CVE-2026-66032 in libssh2 - Patched by Root

Root has patched CVE-2026-66032 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-58051 CVE-2026-58051 in libssh2 - Patched by Root

Root has patched CVE-2026-58051 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-55200 CVE-2026-55200 in libssh2 - Patched by Root

Root has patched CVE-2026-55200 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root

Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root

Root has patched CVE-2026-66034 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-66033 CVE-2026-66033 in libssh2 - Patched by Root

Root has patched CVE-2026-66033 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

EulerOS Virtualization 2.13.1 : libssh2 (EulerOS-SA-2026-3181)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...

EulerOS Virtualization 2.13.0 : libssh2 (EulerOS-SA-2026-3221)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...