gpp_maybe Security update for libssh2_org

SUSE-SLE-Module-Basesystem-15-SP7-2026-3541

This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/userauth.c` (bsc#1263890). - CVE-2026-58050: heap buffer overflow due to missing bounds check in attribute count of publickey-subsystem response (bsc#1269568). - CVE-2026-58051: uninitialized pointer freed when malformed responses are sent by an SSH server (bsc#1269567). - CVE-2026-66032: arbitrary code execution via double-free in SFTP session (bsc#1272737). - CVE-2026-66033: denial of service via integer underflow in AES-GCM cipher negotiation (bsc#1272736). - CVE-2026-66034: information disclosure and potential arbitrary code execution via heap out-of-bounds read (bsc#1272735). - CVE-2026-66035: arbitrary code execution via heap buffer overflow during SSH negotiation (bsc#1272734).

• Release Date
  Aug 10 2026
• References
  Bugzilla: 1263890, 1268546, 1269567, 1269568, 1272734, 1272735, 1272736, 1272737
  CVEs: CVE-2025-15661, CVE-2026-7598, CVE-2026-58050, CVE-2026-58051, CVE-2026-66032, CVE-2026-66033, CVE-2026-66034, CVE-2026-66035
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  libssh2-1
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2-devel
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2_org
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock src

Basesystem Module 15.7 ppc64le

• Packages
  libssh2-1
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2-devel
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2_org
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock src

Basesystem Module 15.7 x86_64

• Packages
  libssh2-1
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2-1-32bit
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2-devel
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2_org
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock src

Basesystem Module 15.7 s390x

• Packages
  libssh2-1
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2-devel
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock rpm

  libssh2_org
  A library implementing the SSH2 protocol

  1.11.0-150600.20.6.1 lock src