https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:31:36 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:18160 <p><strong>Affected:</strong> AlmaLinux:10: libssh, AlmaLinux:10: libssh-config, AlmaLinux:10: libssh-devel</p> <p>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.</p> <p>Security Fix(es):</p> <p>* libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964) * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965) * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967) * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libssh, AlmaLinux:10: libssh-config, AlmaLinux:10: libssh-devel</p> <p>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.</p> <p>Security Fix(es):</p> <p>* libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) * libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964) * libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965) * libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967) * libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:18160 https://cve.radiocsirt.org/vuln/bdu:2026-05141 bdu:2026-05141 https://cve.radiocsirt.org/vuln/bdu:2026-05141 https://cve.radiocsirt.org/vuln/bell-cve-2026-0964 <p><strong>Affected:</strong> Alpaquita:23: libssh, Alpaquita:25: libssh, Alpaquita:stream: libssh</p> <p><strong>Affected:</strong> Alpaquita:23: libssh, Alpaquita:25: libssh, Alpaquita:stream: libssh</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-0964 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0209 certfr-2026-avi-0209 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0209 https://cve.radiocsirt.org/vuln/euvd-2026-362237 EUVD-2026-362237 https://cve.radiocsirt.org/vuln/euvd-2026-362237 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0964 <p>A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.</p> <p>This is the same issue as in OpenSSH, tracked as CVE-2019-6111.</p> <p>A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.</p> <p>This is the same issue as in OpenSSH, tracked as CVE-2019-6111.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-0964 https://cve.radiocsirt.org/vuln/ghsa-9p3w-rm2q-9gxc <p>A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.</p> <p>This is the same issue as in OpenSSH, tracked as CVE-2019-6111.</p> <p>A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences.</p> <p>This is the same issue as in OpenSSH, tracked as CVE-2019-6111.</p> https://cve.radiocsirt.org/vuln/ghsa-9p3w-rm2q-9gxc https://cve.radiocsirt.org/vuln/msrc_cve-2026-0964 msrc_CVE-2026-0964 https://cve.radiocsirt.org/vuln/msrc_cve-2026-0964 https://cve.radiocsirt.org/vuln/oesa-2026-1492 <p><strong>Affected:</strong> openEuler:24.03-LTS: libssh</p> <p>The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). Security Fix(es):</p> <p>(CVE-2026-0964)</p> <p>(CVE-2026-0967)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: libssh</p> <p>The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). Security Fix(es):</p> <p>(CVE-2026-0964)</p> <p>(CVE-2026-0967)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1492 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10203-1 <p>libssh-config-0.11.4-1.1 on GA media</p> <p>libssh-config-0.11.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10203-1 https://cve.radiocsirt.org/vuln/suse-su-2026:0567-1 <p>Security update for libssh</p> <p>Security update for libssh</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0567-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0964 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:Pro:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh, Ubuntu:24.04:LTS: libssh, Ubuntu:25.10: libssh</p> <p>A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue as in OpenSSH, tracked as CVE-2019-6111.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:Pro:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh, Ubuntu:24.04:LTS: libssh, Ubuntu:25.10: libssh</p> <p>A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue as in OpenSSH, tracked as CVE-2019-6111.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0964 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0446 <p>Ein Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um Dateien zu manipulieren oder um einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um Dateien zu manipulieren oder um einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0446