[CLSA-2026:1793099121] libssh2: Fix of CVE-2025-15661
Type:
security
Severity:
Important
Release date:
2026-10-27 11:05:32 UTC
Description:
- CVE-2025-15661: fix out-of-bounds read in sftp_symlink() on a malformed SSH_FXP_NAME response
CVEs fixed:
Updated packages:
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:d7089f355aa1f242c98f11b287957177de6071279ffbfc7c583865f70aa6b66b
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:df423f41c999816aecb9abfd36addbcc35ab309c531606c19314c6b05f923f6b
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:75625d22ab341c0e6375b8059224d383d541f6551ba462bfd9ba016c840d7f41
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:f3b5bd35c8236a59929d8b82269e5cf1fb01800a1d90ca80e281d9eabbc32a34
  • libssh2-docs-1.8.0-4.el7_9.1.tuxcare.els4.noarch.rpm
    sha:ffd16748803cc07b616ca9481e6492bedbbe597a200434a3c57290cd227b3fd4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.