CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).

Security Fix(es):

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.(CVE-2026-59843)

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.(CVE-2026-59844)

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.(CVE-2026-59845)

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.(CVE-2026-59847)

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.(CVE-2026-59850)

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).

Security Fix(es):

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.(CVE-2026-59843)

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.(CVE-2026-59844)

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.(CVE-2026-59845)

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.(CVE-2026-59847)

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.(CVE-2026-59850)

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).

Security Fix(es):

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.(CVE-2026-59843)

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.(CVE-2026-59844)

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.(CVE-2026-59845)

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.(CVE-2026-59847)

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.(CVE-2026-59850)

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).

Security Fix(es):

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.(CVE-2026-59843)

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.(CVE-2026-59844)

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.(CVE-2026-59845)

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.(CVE-2026-59847)

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.(CVE-2026-59850)

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).

Security Fix(es):

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service.(CVE-2026-59843)

A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests.(CVE-2026-59844)

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.(CVE-2026-59845)

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.(CVE-2026-59847)

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.(CVE-2026-59850)

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

• libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842)

• libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

• libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

• libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

• libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

• libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

• libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

• libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849)

• libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

• libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851)

• libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

• libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

• libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

• libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

• libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

• libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

• libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

• libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

• libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

• libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

• libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

• libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

• libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

• libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

• libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

• libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842)
• libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)
• libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)
• libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)
• libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)
• libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)
• libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)
• libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849)
• libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)
• libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851)
• libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

• libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)
• libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)
• libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)
• libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)
• libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)
• libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)
• libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

• libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)
• libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)
• libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)
• libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)
• libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)
• libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)
• libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

• SECURITY UPDATE: authentication tag verification bypass in the AES-GCM ciphers, allowing forged or tampered packets to be accepted as authentic
  • debian/patches/CVE-2026-59847.patch: treat an EVP_DecryptFinal() return value of 0 as an authentication failure (reject rc != 1 || outlen != 0) in evp_cipher_aead_decrypt(), and apply the symmetric fix to evp_cipher_aead_encrypt() so an EVP_EncryptFinal() return value of 0 is no longer treated as success (reject rc != 1), both in src/libcrypto.c
  • CVE-2026-59847

• CVE-2026-59847: integrity downgrade of AES-GCM ciphers in the OpenSSL backend, where a wrong EVP_DecryptFinal() return-code check let a forged authentication tag pass and silently reduced AES-GCM to AES-CTR
• CVE-2026-59850: use-after-free via channel data callbacks invoked on remotely-closed channels, where already-freed channel data could still be handed to application callbacks

• CVE-2026-59847: integrity downgrade of AES-GCM ciphers in the OpenSSL backend, where a wrong EVP_DecryptFinal() return-code check let a forged authentication tag pass and silently reduced AES-GCM to AES-CTR
• CVE-2026-59850: use-after-free via channel data callbacks invoked on remotely-closed channels, where already-freed channel data could still be handed to application callbacks

• CVE-2026-59847: integrity downgrade of AES-GCM ciphers in the OpenSSL backend, where a wrong EVP_DecryptFinal() return-code check let a forged authentication tag pass and silently reduced AES-GCM to AES-CTR
• CVE-2026-59850: use-after-free via channel data callbacks invoked on remotely-closed channels, where already-freed channel data could still be handed to application callbacks

• CVE-2026-59847: fix incorrect return-code check of EVP_EncryptFinal / EVP_DecryptFinal that could bypass AES-GCM tag verification
• CVE-2026-59850: reject SSH_MSG_CHANNEL_DATA received after remote close to avoid processing data on closed channels

• CVE-2026-59847: fix AES-GCM tag verification and encryption finalization checks in the OpenSSL backend to preserve integrity protection
• CVE-2026-59850: avoid processing DATA packets on remotely closed channels to prevent use-after-free on channel data callbacks

Stack buffer overflow in SFTP server longname construction. (CVE-2026-15370) Denial of service via zero advertised channel packet size. (CVE-2026-59843) Denial of service via oversized SFTP read length. (CVE-2026-59844) Denial of service via unchecked ProxyCommand fork() failure. (CVE-2026-59845) Information disclosure via ProxyCommand %r username expansion. (CVE-2026-59846) Integrity downgrade via OpenSSL AES-GCM tag verification. (CVE-2026-59847) Denial of service via SFTP responses with unknown request IDs. (CVE-2026-59848) Denial of service via automatic certificate authentication loop. (CVE-2026-59849) Use-after-free via data callbacks on closed channels. (CVE-2026-59850)

These are all security issues fixed in the libssh-config-0.11.5-1.1 package on the GA media of openSUSE Tumbleweed.

This update for libssh fixes the following issues:

• CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162).
• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

Changes for libssh:

• Update to 0.11.5:

• Zero-initialize every ssh_string
• Fix compatibility with C23 / gcc16
• Fix multiple memory leaks, null checks, and error checks
• Validate peer public key in DH key exchange
• Avoid remote window overflow
• Avoid off-by-one overflow during kbdint authentication
• Avoid logging uninitialized sequence numbers
• Avoid double conversion of SFTP version number
• Send correct SFTP server version number
• Avoid handling repeated SFTP INIT messages
• Harmonize return values from SFTP server callbacks

• Update %suse_version checks for SLES 16.x (jsc#PED-15815)

This update for libssh fixes the following issues:

• CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162).
• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

Changes for libssh:

• Update to 0.11.5:

• Zero-initialize every ssh_string
• Fix compatibility with C23 / gcc16
• Fix multiple memory leaks, null checks, and error checks
• Validate peer public key in DH key exchange
• Avoid remote window overflow
• Avoid off-by-one overflow during kbdint authentication
• Avoid logging uninitialized sequence numbers
• Avoid double conversion of SFTP version number
• Send correct SFTP server version number
• Avoid handling repeated SFTP INIT messages
• Harmonize return values from SFTP server callbacks

• Update %suse_version checks for SLES 16.x (jsc#PED-15815)

This update for libssh fixes the following issues:

• CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162).
• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

Changes for libssh:

• Update to 0.11.5:

• Zero-initialize every ssh_string
• Fix compatibility with C23 / gcc16
• Fix multiple memory leaks, null checks, and error checks
• Validate peer public key in DH key exchange
• Avoid remote window overflow
• Avoid off-by-one overflow during kbdint authentication
• Avoid logging uninitialized sequence numbers
• Avoid double conversion of SFTP version number
• Send correct SFTP server version number
• Avoid handling repeated SFTP INIT messages
• Harmonize return values from SFTP server callbacks

• Update %suse_version checks for SLES 16.x (jsc#PED-15815)

This update for libssh fixes the following issues:

• CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162).
• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

Changes for libssh:

• Update to 0.11.5:

• Zero-initialize every ssh_string
• Fix compatibility with C23 / gcc16
• Fix multiple memory leaks, null checks, and error checks
• Validate peer public key in DH key exchange
• Avoid remote window overflow
• Avoid off-by-one overflow during kbdint authentication
• Avoid logging uninitialized sequence numbers
• Avoid double conversion of SFTP version number
• Send correct SFTP server version number
• Avoid handling repeated SFTP INIT messages
• Harmonize return values from SFTP server callbacks

• Update %suse_version checks for SLES 16.x (jsc#PED-15815)

This update for libssh fixes the following issues:

• CVE-2026-3731: denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

This update for libssh fixes the following issues

• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

This update for libssh fixes the following issues

• CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

This update for libssh fixes the following issues:

• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

This update for libssh fixes the following issues:

• CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
• CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
• CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
• CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
• CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
• CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
• CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-15370)

It was discovered that libssh did not correctly handle SSH channel open messages advertising a zero maximum packet size. An authenticated remote attacker could possibly use this issue to cause libssh to consume excessive CPU resources, leading to a denial of service. (CVE-2026-59843)

It was discovered that libssh did not correctly limit SFTP read request lengths in its server implementation. An authenticated remote attacker could possibly use this issue to cause libssh to allocate excessive memory, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-59844)

It was discovered that libssh did not correctly handle ProxyCommand fork() failures. A local attacker could possibly use this issue to cause a denial of service. (CVE-2026-59845)

It was discovered that libssh did not correctly sanitize shell metacharacters when expanding usernames in ProxyCommand strings. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-59846)

It was discovered that libssh had incorrect AES-GCM tag verification when built with the OpenSSL backend. A machine-in-the-middle attacker could possibly use this issue to modify encrypted traffic without detection. (CVE-2026-59847)

It was discovered that libssh did not correctly handle SFTP server responses for unknown request IDs. An attacker could possibly use this issue to cause libssh to use excessive memory, leading to a denial of service. (CVE-2026-59848)

It was discovered that libssh had logic errors in certificate-based authentication that could cause clients to loop indefinitely when certificates were rejected. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-59849)

It was discovered that libssh could invoke data callbacks on channels after they had been closed. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. (CVE-2026-59850)