Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Outdated libssh Library Puts SSH Connections at Risk

published 7 months ago

Summary

A security update is available for the libssh library, which is used by some programs for secure remote connections. This update fixes multiple security issues that could allow an attacker to gain unauthorized access to your system. To protect your system, update the libssh library as soon as possible.

What to do

Update openeuler libssh to version 0.9.6-15.oe2203sp4.

Affected software

Ecosystem	Vendor	Product	Affected versions
openEuler:22.03-LTS-SP4	openeuler	libssh	< 0.9.6-15.oe2203sp4 Fix: upgrade to 0.9.6-15.oe2203sp4

Original advisory text

libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).

Security Fix(es):

(CVE-2026-0964)

(CVE-2026-0965)

(CVE-2026-0966)

(CVE-2026-0967)

(CVE-2026-0968)

References

https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0964 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0965 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0966 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0967 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0968 Vendor Advisory

Severity

6.5 Medium

Timeline

Published15 Mar 2026

Updated18 Aug 2026

First seen15 Mar 2026

Sources

OESA-2026-1562 · OSV

Track software like this

Free during beta