[CLSA-2026:1793098632] libssh2: Fix of CVE-2025-15661
Type:
security
Severity:
Important
Release date:
2026-10-27 10:57:22 UTC
Description:
- CVE-2025-15661: fix out-of-bounds read in sftp_symlink() on a malformed SSH_FXP_NAME response
CVEs fixed:
Updated packages:
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:a851ff08213881fd7fb73e91526e0cea71fcf01beaa31334a706a97cf301d98d
  • libssh2-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:965608a4b0fc5109dce7adcd317a75f08f615369bb5fd5d184580ba83ef615c4
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.i686.rpm
    sha:ee148a93be82f2bd57c37e3cf2e30965b29c939347f3d1048ae1c506f900759b
  • libssh2-devel-1.8.0-4.el7_9.1.tuxcare.els4.x86_64.rpm
    sha:3302749e09f3fc685e193df92f929d0ed4befff6b597eeda6b6aeb47dc5cdf5d
  • libssh2-docs-1.8.0-4.el7_9.1.tuxcare.els4.noarch.rpm
    sha:6155fc6e0c1fb7da5ee5e476c41e3c432a0dbc5a05a8d33dc4d57d18adc81fae
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.