Alerts This Week
Warning Icon 1 1,082
Alerts This Week
Warning Icon 1 1,082

Fedora 43 libssh2 Severe Heap Overflow Update FEDORA-2026-1b9134cdc9

fedora
Calendar Grey June 6, 2026
Dist Fedora Esm H88
An urgent update for Fedora addresses a critical buffer overflow in libssh2, protecting against potential remote exploits.
This update addresses CVE-2026-7598, a potential heap buffer overflow, which could be triggered remotely by supplying very long username and/or password strings.

Summary

libssh2 is a library implementing the SSH2 protocol as defined by

Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25),

SECSH-CONNECTION(23), SECSH-ARCH(20), SECSH-FILEXFER(06)*,

SECSH-DHGEX(04), and SECSH-NUMBERS(10).

Update Information:

This update addresses CVE-2026-7598, a potential heap buffer overflow, which could be triggered remotely by supplying very long username and/or password strings.

Topics%20covered

Topics Covered

security advisory fedora critical threat heap overflow libssh2

Change Log

* Fri May 22 2026 Paul Howarth - 1.11.1-6 - Fix CVE-2026-7598: integer overflow via large username or password arguments (https://github.com/libssh2/libssh2/pull/1858) * Fri Jan 16 2026 Fedora Release Engineering - 1.11.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2468328 - CVE-2026-7598 libssh2: integer overflow via large username or password arguments [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2468328

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1b9134cdc9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libssh2
Product: Fedora 43
Version: 1.11.1
Release: 6.fc43
URL: https://www.libssh2.org/
Summary: A library implementing the SSH2 protocol

Topics%20covered

Topics Covered

security advisory fedora critical threat heap overflow libssh2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here