Alerts This Week
Warning Icon 1 1,213
Alerts This Week
Warning Icon 1 1,213

openSUSE Leap 16.0 Advisory ID 21057-1 libssh2 Important DoS Issues

opensuse
Calendar Grey June 30, 2026
Dist Opensuse Esm H88
An essential update for openSUSE addressing two key vulnerabilities in libssh2_org, including critical security issues.
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.

Description

This update for libssh2_org fixes the following issues

- CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530).

- CVE-2026-55200: out-of-Bounds write via Unchecked packet_length in transport.c (bsc#1268531).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1078=1

Topics%20covered

Topics Covered

security advisory important OpenSUSE out-of-bounds write libssh2_org pre-authentication DoS

Patch

Package List

- openSUSE Leap 16.0:

libssh2-1-1.11.1-160000.4.1

libssh2-devel-1.11.1-160000.4.1

References

* bsc#1268530

* bsc#1268531

References:

* https://www.suse.com/security/cve/CVE-2026-55199.html

* https://www.suse.com/security/cve/CVE-2026-55200.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21057-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory important OpenSUSE out-of-bounds write libssh2_org pre-authentication DoS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here