Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 43: libssh Important Fix for Memory Leak CVE-2025-8114 CVE-2025-8277

fedora
Calendar Grey September 20, 2025
Dist Fedora Esm H88
libssh on Fedora 43 has been updated to address severe vulnerabilities, specifically a memory leak and NULL pointer dereference. Prompt attention is advised.
New upstream release fixing the following security weaknesses (CVE-2025-8114, CVE-2025-8277)

Summary

The ssh library was designed to be used by programmers needing a working SSH

implementation by the mean of a library. The complete control of the client is

made by the programmer. With libssh, you can remotely execute programs, transfer

files, use a secure and transparent tunnel for your remote programs. With its

Secure FTP implementation, you can play with remote files easily, without

third-party programs others than libcrypto (from openssl).

Update Information:

New upstream release fixing the following security weaknesses (CVE-2025-8114, CVE-2025-8277)

Topics%20covered

Topics Covered

security advisory fedora important memory leak null pointer libssh

Change Log

* Tue Sep 9 2025 Jakub Jelen - 0.11.3-1 - New upstream release fixing the following security weaknesses: - CVE-2025-8114: Fix NULL pointer dereference after allocation failure - CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX

References


[ 1 ] Bug #2394021 - libssh-0.11.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2394021

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-50a98965b5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: libssh
Product: Fedora 43
Version: 0.11.3
Release: 1.fc43
URL: http://www.libssh.org
Summary: A library implementing the SSH protocol

Topics%20covered

Topics Covered

security advisory fedora important memory leak null pointer libssh

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here