[CLSA-2026:1793099608] libssh2: Fix of CVE-2025-15661
Type:
security
Severity:
Important
Release date:
2026-10-27 12:34:56 UTC
Description:
- CVE-2025-15661: fix out-of-bounds read in sftp_symlink() on a malformed SSH_FXP_NAME response
CVEs fixed:
Updated packages:
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:e79bd5b6f190c4a7fc4e474a4fb3ac5238aae5396574f742debf6820c84f26ad
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:6f7c59cf769d098691f52c1049c5d8999425ca4f7f83c4bee58483d8879fe2b8
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:0cf0415453560680a1955d41119347b97b37e8c28e49cc878a74d6f55458a075
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:89b7ae2a147c385ae7d03548b324d3b5f2fe7ad7fc368c8b4073c05025fda5f4
  • libssh2-docs-1.8.0-4.el7_9.1.tuxcare.els4.noarch.rpm
    sha:abdb5ea60c4a8a7e703e95d32300cdea8bca4cf6bce999eef2c6f855a018f356
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.