shield Security update for libssh

SUSE-SLES-16.0-1349

This update for libssh fixes the following issues: - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162). - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166). - CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167). - CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168). - CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169). - CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170). - CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171). Changes for libssh: - Update to 0.11.5: * Zero-initialize every ssh_string * Fix compatibility with C23 / gcc16 * Fix multiple memory leaks, null checks, and error checks * Validate peer public key in DH key exchange * Avoid remote window overflow * Avoid off-by-one overflow during kbdint authentication * Avoid logging uninitialized sequence numbers * Avoid double conversion of SFTP version number * Send correct SFTP server version number * Avoid handling repeated SFTP INIT messages * Harmonize return values from SFTP server callbacks - Update %suse_version checks for SLES 16.x (jsc#PED-15815)

• Release Date
  Jul 25 2026
• References
  Bugzilla: 1272162, 1272164, 1272165, 1272166, 1272167, 1272168, 1272169, 1272170, 1272171
  CVEs: CVE-2026-15370, CVE-2026-59843, CVE-2026-59844, CVE-2026-59845, CVE-2026-59846, CVE-2026-59847, CVE-2026-59848, CVE-2026-59849, CVE-2026-59850
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  libssh-config
  SSH library configuration files

  0.11.5-160000.1.1 lock rpm

  libssh-devel
  SSH library development headers

  0.11.5-160000.1.1 lock rpm

  libssh4
  SSH library

  0.11.5-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  libssh-config
  SSH library configuration files

  0.11.5-160000.1.1 lock rpm

  libssh-devel
  SSH library development headers

  0.11.5-160000.1.1 lock rpm

  libssh4
  SSH library

  0.11.5-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  libssh-config
  SSH library configuration files

  0.11.5-160000.1.1 lock rpm

  libssh-devel
  SSH library development headers

  0.11.5-160000.1.1 lock rpm

  libssh4
  SSH library

  0.11.5-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  libssh-config
  SSH library configuration files

  0.11.5-160000.1.1 lock rpm

  libssh-devel
  SSH library development headers

  0.11.5-160000.1.1 lock rpm

  libssh4
  SSH library

  0.11.5-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  libssh-config
  SSH library configuration files

  0.11.5-160000.1.1 lock rpm

  libssh-devel
  SSH library development headers

  0.11.5-160000.1.1 lock rpm

  libssh4
  SSH library

  0.11.5-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  libssh-config
  SSH library configuration files

  0.11.5-160000.1.1 lock rpm

  libssh-devel
  SSH library development headers

  0.11.5-160000.1.1 lock rpm

  libssh4
  SSH library

  0.11.5-160000.1.1 lock rpm