gpp_maybe Security update for libssh

SUSE-SUSE-MicroOS-5.2-2025-2279

This update for libssh fixes the following issues: - CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309). - CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310). - CVE-2025-5318: Fixed likely read beyond bounds in sftp server handle management (bsc#1245311). - CVE-2025-5372: Fixed ssh_kdf() returns a success code on certain failures (bsc#1245314).

• Release Date
  Jul 10 2025
• References
  Bugzilla: 1245314, 1245309, 1245310, 1245311
  CVEs: CVE-2025-5372, CVE-2025-5318, CVE-2025-4878, CVE-2025-4877
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  libssh
  The SSH library

  0.9.8-150200.13.9.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150200.13.9.1 lock rpm

  libssh4
  SSH library

  0.9.8-150200.13.9.1 lock rpm

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  libssh
  The SSH library

  0.9.8-150200.13.9.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150200.13.9.1 lock rpm

  libssh4
  SSH library

  0.9.8-150200.13.9.1 lock rpm

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  libssh
  The SSH library

  0.9.8-150200.13.9.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150200.13.9.1 lock rpm

  libssh4
  SSH library

  0.9.8-150200.13.9.1 lock rpm