shield Security update for libssh

SUSE-SLE-Module-Basesystem-15-SP7-2025-3369

This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375). - CVE-2025-8114: NULL pointer dereference when an allocation error happens during the calculation of the KEX session ID (bsc#1246974).

• Release Date
  Sep 26 2025
• References
  Bugzilla: 1246974, 1249375
  CVEs: CVE-2025-8114, CVE-2025-8277
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  libssh
  The SSH library

  0.9.8-150600.11.6.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150600.11.6.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150600.11.6.1 lock rpm

  libssh4
  SSH library

  0.9.8-150600.11.6.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libssh
  The SSH library

  0.9.8-150600.11.6.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150600.11.6.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150600.11.6.1 lock rpm

  libssh4
  SSH library

  0.9.8-150600.11.6.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libssh
  The SSH library

  0.9.8-150600.11.6.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150600.11.6.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150600.11.6.1 lock rpm

  libssh4
  SSH library

  0.9.8-150600.11.6.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libssh
  The SSH library

  0.9.8-150600.11.6.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150600.11.6.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150600.11.6.1 lock rpm

  libssh4
  SSH library

  0.9.8-150600.11.6.1 lock rpm

  libssh4-32bit
  SSH library

  0.9.8-150600.11.6.1 lock rpm