SUSE-SU-2025:20596-1: libssh&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2025:20596-1 is a vulnerability in libssh&distro=SUSE Linux Micro 6.1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 14-08-2025PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for libssh This update for libssh fixes the following issues: - CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314) - CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317) - CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309) - CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310) - CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311) - CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- libssh&distro=SUSE Linux Micro 6.1< 0.10.6-slfo.1.1_2.1
1 vendor · 1 product