Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
cleanstart/libssh may mishandle security hashes
published 4 days ago
Summary
The libssh library used by cleanstart can incorrectly process the digital fingerprints that protect data. This mistake could let a malicious user interfere with secure communications or bypass checks. Apply the latest libssh update or patch as soon as possible to fix the issue.
What to do
- Update cleanstart libssh to version 0.10.6-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | libssh |
< 0.10.6-r0 Fix: upgrade to 0.10.6-r0
|
Original advisory text
flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends
Security vulnerability affects the libssh package. A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2025-YN90003 · OSV
Track software like this
Free during beta