shield Security update for libssh

SUSE-SLE-Micro-6.1-412

This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#1258045). - CVE-2026-0966: buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054). - CVE-2026-0967: specially crafted patterns could cause denial of service (bsc#1258081). - CVE-2026-0968: malformed SFTP message can lead to out of bound read (bsc#1258080).

• Release Date
  Feb 26 2026
• References
  Bugzilla: 1258045, 1258049, 1258054, 1258080, 1258081
  CVEs: CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Micro 6.1 s390x

• Packages
  libssh-config
  SSH library configuration files

  0.10.6-slfo.1.1_4.1 lock rpm

  libssh4
  SSH library

  0.10.6-slfo.1.1_4.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

• Packages
  libssh-config
  SSH library configuration files

  0.10.6-slfo.1.1_4.1 lock rpm

  libssh4
  SSH library

  0.10.6-slfo.1.1_4.1 lock rpm

SUSE Linux Micro 6.1 aarch64

• Packages
  libssh-config
  SSH library configuration files

  0.10.6-slfo.1.1_4.1 lock rpm

  libssh4
  SSH library

  0.10.6-slfo.1.1_4.1 lock rpm

SUSE Linux Micro 6.1 x86_64

• Packages
  libssh-config
  SSH library configuration files

  0.10.6-slfo.1.1_4.1 lock rpm

  libssh4
  SSH library

  0.10.6-slfo.1.1_4.1 lock rpm