< back to search

shield Security update for libssh

SUSE-SLE-Micro-5.4-2025-3788

This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375). - CVE-2025-8114: NULL pointer dereference when an allocation error happens during the calculation of the KEX session ID (bsc#1246974).

Release Date

Oct 24 2025
References

Bugzilla: 1246974, 1249375
CVEs: CVE-2025-8277, CVE-2025-8114
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.4 s390x

Packages

libssh
The SSH library

0.9.8-150400.3.12.1 lock src

libssh-config
SSH library configuration files

0.9.8-150400.3.12.1 lock rpm

libssh4
SSH library

0.9.8-150400.3.12.1 lock rpm

SUSE Linux Enterprise Micro 5.4 aarch64

Packages

libssh
The SSH library

0.9.8-150400.3.12.1 lock src

libssh-config
SSH library configuration files

0.9.8-150400.3.12.1 lock rpm

libssh4
SSH library

0.9.8-150400.3.12.1 lock rpm

SUSE Linux Enterprise Micro 5.4 x86_64

Packages

libssh
The SSH library

0.9.8-150400.3.12.1 lock src

libssh-config
SSH library configuration files

0.9.8-150400.3.12.1 lock rpm

libssh4
SSH library

0.9.8-150400.3.12.1 lock rpm