Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Critical Update Information for Fedora 44 libssh - 2026-0e46c91ccf

fedora
Calendar Grey July 22, 2026
Scroller Fedora
Multiple critical issues addressed in the libssh library for Fedora affecting security and performance.
Fedora 44 has released libssh version 0.12.1, addressing multiple security vulnerabilities and updates, enhancing SSH protocol implementation for developers with a focus on securit...

Summary

The ssh library was designed to be used by programmers needing a working SSH

implementation by the mean of a library. The complete control of the client is

made by the programmer. With libssh, you can remotely execute programs, transfer

files, use a secure and transparent tunnel for your remote programs. With its

Secure FTP implementation, you can play with remote files easily, without

third-party programs others than libcrypto (from openssl).

Update Information:

New upstream security release

Topics%20covered

Topics Covered

security advisory denial of service fedora critical information disclosure libssh

Change Log

* Tue Jul 21 2026 Jakub Jelen - 0.12.1-1 - New upstream security release * Thu Jul 16 2026 Fedora Release Engineering - 0.12.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz - 0.12.0-3 - Rebuilt for openssl 4.0

References


[ 1 ] Bug #2503148 - libssh-0.12.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2503148 [ 2 ] Bug #2503651 - CVE-2026-15370 libssh: libssh: stack buffer overflow in SFTP server longname construction [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503651 [ 3 ] Bug #2503656 - CVE-2026-59842 libssh: libssh: information disclosure via short GSSAPI Curve25519 public key [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503656 [ 4 ] Bug #2503657 - CVE-2026-59843 libssh: libssh: denial of service via zero advertised channel packet size [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503657 [ 5 ] Bug #2503658 - CVE-2026-59844 libssh: libssh: denial of service via oversized SFTP read length [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2503658 [ 6 ] Bug #2503668 - CVE-2026-59845 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure [fedora-all] https...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-0e46c91ccf' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libssh
Product: Fedora 44
Version: 0.12.1
Release: 1.fc44
URL: http://www.libssh.org
Summary: A library implementing the SSH protocol

Topics%20covered

Topics Covered

security advisory denial of service fedora critical information disclosure libssh

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.