[CLSA-2026:1793099211] libssh2: Fix of CVE-2025-15661
Type:
security
Severity:
Important
Release date:
2026-10-27 14:38:40 UTC
Description:
- CVE-2025-15661: fix out-of-bounds read in sftp_symlink() on a malformed SSH_FXP_NAME response
CVEs fixed:
Updated packages:
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:2a2f5b2e160757909b2134816d3bfcc53bb2bc45816559ae6ea2f6f79f7d8a00
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:705a3ab0345ab35a02dc83920a05c7f856d0aa5f340e5df3b3c86ad3c06d25a3
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:9e0cda317435b10dfa63b185232828d1632f01ea071bda517de1878bea5e43e5
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:f9c2072f6e177f132005b645d368aedea9a079070f112216670dc08bf8057698
  • libssh2-docs-1.8.0-4.el7_9.1.tuxcare.els4.noarch.rpm
    sha:79063722c1d252a801ab20f77cb15d4765aa543b4de48ca9bb679910f927abfc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.