SUSE-SU-2026:1344-1: libssh&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise

Published

Published 15-04-2026Last modified 16-04-2026

Vulnerability summary

SUSE-SU-2026:1344-1 is a vulnerability in libssh&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 6

CVE-2026-0964 CVE-2026-0965 CVE-2026-0966 CVE-2026-0967 CVE-2026-0968 CVE-2026-3731

Timeline

15-04-2026
PublishedVulnerability first disclosed.
16-04-2026
Last modifiedVulnerability information updated.

Description

Security update for libssh This update for libssh fixes the following issues: - CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler (bsc#1259377). - CVE-2026-0964: SCP protocol path traversal in `ssh_scp_pull_request()` (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#1258045). - CVE-2026-0966: buffer underflow in `ssh_get_hexa()` on invalid input (bsc#1258054). - CVE-2026-0967: specially crafted patterns could cause a denial of service (bsc#1258081). - CVE-2026-0968: out-of-bounds read in `sftp_parse_longname()` (bsc#1258080).