{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for libssh is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.\n\nSecurity Fix(es):\n\n* libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966)\n\n* libssh: Improper sanitation of paths received from SCP servers (CVE-2026-0964)\n\n* libssh: libssh: Denial of Service via improper configuration file handling (CVE-2026-0965)\n\n* libssh: libssh: Denial of Service via inefficient regular expression processing (CVE-2026-0967)\n\n* libssh: libssh: Denial of Service due to malformed SFTP message (CVE-2026-0968)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:18160",
        "url": "https://access.redhat.com/errata/RHSA-2026:18160"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2433121",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433121"
      },
      {
        "category": "external",
        "summary": "2436979",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436979"
      },
      {
        "category": "external",
        "summary": "2436980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436980"
      },
      {
        "category": "external",
        "summary": "2436981",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436981"
      },
      {
        "category": "external",
        "summary": "2436982",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436982"
      },
      {
        "category": "external",
        "summary": "RHEL-133421",
        "url": "https://issues.redhat.com/browse/RHEL-133421"
      },
      {
        "category": "external",
        "summary": "RHEL-70825",
        "url": "https://issues.redhat.com/browse/RHEL-70825"
      },
      {
        "category": "external",
        "summary": "RHEL-93748",
        "url": "https://issues.redhat.com/browse/RHEL-93748"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18160.json"
      }
    ],
    "title": "Red Hat Security Advisory: libssh security update",
    "tracking": {
      "current_release_date": "2026-05-19T09:11:27+00:00",
      "generator": {
        "date": "2026-05-19T09:11:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2026:18160",
      "initial_release_date": "2026-05-19T09:10:57+00:00",
      "revision_history": [
        {
          "date": "2026-05-19T09:10:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-19T09:10:57+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-19T09:11:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 10)",
                  "product_id": "BaseOS-10.2.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-2.el10.aarch64",
                "product": {
                  "name": "libssh-devel-0:0.12.0-2.el10.aarch64",
                  "product_id": "libssh-devel-0:0.12.0-2.el10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-2.el10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-2.el10.aarch64",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-2.el10.aarch64",
                  "product_id": "libssh-debugsource-0:0.12.0-2.el10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-2.el10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-2.el10.aarch64",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-2.el10.aarch64",
                  "product_id": "libssh-debuginfo-0:0.12.0-2.el10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-2.el10?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-2.el10.aarch64",
                "product": {
                  "name": "libssh-0:0.12.0-2.el10.aarch64",
                  "product_id": "libssh-0:0.12.0-2.el10.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-2.el10?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-2.el10.ppc64le",
                "product": {
                  "name": "libssh-devel-0:0.12.0-2.el10.ppc64le",
                  "product_id": "libssh-devel-0:0.12.0-2.el10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-2.el10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-2.el10.ppc64le",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-2.el10.ppc64le",
                  "product_id": "libssh-debugsource-0:0.12.0-2.el10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-2.el10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
                  "product_id": "libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-2.el10?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-2.el10.ppc64le",
                "product": {
                  "name": "libssh-0:0.12.0-2.el10.ppc64le",
                  "product_id": "libssh-0:0.12.0-2.el10.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-2.el10?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-2.el10.s390x",
                "product": {
                  "name": "libssh-devel-0:0.12.0-2.el10.s390x",
                  "product_id": "libssh-devel-0:0.12.0-2.el10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-2.el10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-2.el10.s390x",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-2.el10.s390x",
                  "product_id": "libssh-debugsource-0:0.12.0-2.el10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-2.el10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-2.el10.s390x",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-2.el10.s390x",
                  "product_id": "libssh-debuginfo-0:0.12.0-2.el10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-2.el10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-2.el10.s390x",
                "product": {
                  "name": "libssh-0:0.12.0-2.el10.s390x",
                  "product_id": "libssh-0:0.12.0-2.el10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-2.el10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0:0.12.0-2.el10.x86_64",
                "product": {
                  "name": "libssh-devel-0:0.12.0-2.el10.x86_64",
                  "product_id": "libssh-devel-0:0.12.0-2.el10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-devel@0.12.0-2.el10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debugsource-0:0.12.0-2.el10.x86_64",
                "product": {
                  "name": "libssh-debugsource-0:0.12.0-2.el10.x86_64",
                  "product_id": "libssh-debugsource-0:0.12.0-2.el10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debugsource@0.12.0-2.el10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-debuginfo-0:0.12.0-2.el10.x86_64",
                "product": {
                  "name": "libssh-debuginfo-0:0.12.0-2.el10.x86_64",
                  "product_id": "libssh-debuginfo-0:0.12.0-2.el10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-debuginfo@0.12.0-2.el10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-2.el10.x86_64",
                "product": {
                  "name": "libssh-0:0.12.0-2.el10.x86_64",
                  "product_id": "libssh-0:0.12.0-2.el10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-2.el10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-0:0.12.0-2.el10.src",
                "product": {
                  "name": "libssh-0:0.12.0-2.el10.src",
                  "product_id": "libssh-0:0.12.0-2.el10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh@0.12.0-2.el10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0:0.12.0-2.el10.noarch",
                "product": {
                  "name": "libssh-config-0:0.12.0-2.el10.noarch",
                  "product_id": "libssh-config-0:0.12.0-2.el10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libssh-config@0.12.0-2.el10?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.src",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0:0.12.0-2.el10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch"
        },
        "product_reference": "libssh-config-0:0.12.0-2.el10.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.src",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0:0.12.0-2.el10.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch"
        },
        "product_reference": "libssh-config-0:0.12.0-2.el10.noarch",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debuginfo-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-debuginfo-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-debugsource-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-debugsource-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.aarch64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.ppc64le",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.s390x",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0:0.12.0-2.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
          "product_id": "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
        },
        "product_reference": "libssh-devel-0:0.12.0-2.el10.x86_64",
        "relates_to_product_reference": "BaseOS-10.2.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "CTyun"
          ],
          "organization": "Red-Shield Security Lab"
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0964",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-02-04T23:37:53.443000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436979"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A malicious SCP server can send unexpected paths that could make the\nclient application override local files outside of working directory.\nThis could be misused to create malicious executable or configuration\nfiles and make the user execute them under specific consequences.\n\nThis is the same issue as in OpenSSH, tracked as CVE-2019-6111.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: Improper sanitation of paths received from SCP servers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0964"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436979",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436979"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0964",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0964"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0964",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0964"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:44:42.346000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:10:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18160"
        },
        {
          "category": "workaround",
          "details": "Do not use SCP! SCP is deprecated for several years and will\nbe removed in future releases!\n\nIf you have to, the application MUST validate the path returned\nfrom `ssh_scp_request_get_filename()` is the path the application\nrequested. The libssh does not do any writing in this case.",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: Improper sanitation of paths received from SCP servers"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kang Yang"
          ]
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0965",
      "cwe": {
        "id": "CWE-73",
        "name": "External Control of File Name or Path"
      },
      "discovery_date": "2026-02-04T23:40:45.160000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service via improper configuration file handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0965"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0965",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0965"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0965",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0965"
        }
      ],
      "release_date": "2026-02-10T18:47:22.524000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:10:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18160"
        },
        {
          "category": "workaround",
          "details": "Ensure the client and server are using only regular files as configuration.",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: Denial of Service via improper configuration file handling"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kang Yang",
            "Yunhang Zhang",
            "Jun Xu"
          ]
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0966",
      "cwe": {
        "id": "CWE-124",
        "name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
      },
      "discovery_date": "2026-01-26T23:14:46.617000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433121"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authentication if the server\u0027s logging verbosity is set to `SSH_LOG_PACKET (3)` or higher. Successful exploitation could lead to a self-Denial of Service of the per-connection daemon process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Attack Complexity is high as it requires the logging verbosity to be set to `SSH_LOG_PACKET (3)` or higher, which is not the default configuration in Red Hat Enterprise Linux.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0966"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433121",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433121"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0966",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0966"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0966",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0966"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:47:15.531000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:10:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18160"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, consider disabling GSSAPI authentication if it is not required, or reduce the `LogLevel` in the `sshd_config` file to a value lower than `SSH_LOG_PACKET` (e.g., `INFO`).\n\nTo disable GSSAPI authentication, add or modify the following line in `/etc/ssh/sshd_config`:\n`GSSAPIAuthentication no`\n\nTo reduce logging verbosity, add or modify the following line in `/etc/ssh/sshd_config`:\n`LogLevel INFO`\n\nAfter making changes to `sshd_config`, the `sshd` service must be restarted for the changes to take effect. This may temporarily interrupt active SSH sessions.",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Kang Yang"
          ]
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0967",
      "cwe": {
        "id": "CWE-1333",
        "name": "Inefficient Regular Expression Complexity"
      },
      "discovery_date": "2026-02-04T23:43:23.869000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436981"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when processed by the `match_pattern()` function can lead to inefficient regular expression backtracking. This can cause timeouts and resource exhaustion, resulting in a Denial of Service (DoS) for the client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service via inefficient regular expression processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability in libssh has been rated as Low by Red Hat Product Security.\n\nThis issue arises from inefficient pattern matching logic that may lead to excessive processing time when handling specially crafted patterns. However, these patterns originate from configuration data, meaning an attacker would need the ability to modify or influence configuration files to exploit the issue.\n\nAs a result, exploitation requires local access or equivalent local privileges, and cannot be performed remotely without prior compromise. Additionally, triggering the issue depends on specific conditions during pattern evaluation, increasing the attack complexity.\n\nThe impact of this flaw is limited to potential performance degradation or temporary delays due to increased CPU usage. It does not allow unauthorized access to data, modification of system state, or execution of arbitrary code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0967"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436981",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436981"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0967",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0967"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0967",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0967"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:47:09.215000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:10:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18160"
        },
        {
          "category": "workaround",
          "details": "Avoid using complex patterns in configuration files and known_hosts.",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.2,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: Denial of Service via inefficient regular expression processing"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "nevv"
          ],
          "organization": "CTyun Red-Shield Security Lab"
        },
        {
          "names": [
            "Jakub Jelen"
          ],
          "organization": "libssh"
        }
      ],
      "cve": "CVE-2026-0968",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-02-04T23:46:17.534000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436982"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed \u0027longname\u0027 field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check can lead to reading beyond allocated memory on the heap. This can cause unexpected behavior or lead to a denial of service (DoS) due to application crashes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libssh: libssh: Denial of Service due to malformed SFTP message",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability in libssh has been rated as Low by Red Hat Product Security.\n\nThis issue affects the libssh client when processing responses from an SFTP server. Successful exploitation requires a user to initiate a connection to a malicious or compromised SFTP server and perform specific operations, such as listing directory contents. As a result, exploitation is not possible without user interaction.\n\nAdditionally, the vulnerability depends on specially crafted protocol responses from a malicious server, increasing the attack complexity and reducing the likelihood of successful exploitation in typical deployments. \n\nThe impact of this flaw is limited to a client-side denial-of-service condition, such as an application crash. There is no evidence that this issue can be leveraged to execute arbitrary code, access sensitive information, or modify data.\n\nDue to the requirement for user interaction, higher attack complexity, and limited impact on availability only, Red Hat considers this vulnerability to have a lower risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
          "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
          "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0968"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436982",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436982"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-0968",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-0968"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0968",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0968"
        },
        {
          "category": "external",
          "summary": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/",
          "url": "https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/"
        }
      ],
      "release_date": "2026-02-10T18:46:58.858000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:10:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18160"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "AppStream-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "AppStream-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.src",
            "BaseOS-10.2.GA:libssh-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-config-0:0.12.0-2.el10.noarch",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debuginfo-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-debugsource-0:0.12.0-2.el10.x86_64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.aarch64",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.ppc64le",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.s390x",
            "BaseOS-10.2.GA:libssh-devel-0:0.12.0-2.el10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libssh: libssh: Denial of Service due to malformed SFTP message"
    }
  ]
}