SUSE-SU-2026:1565-1: libssh&distro=SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:1565-1 is a vulnerability in libssh&distro=SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 23-04-2026PublishedVulnerability first disclosed.
- 24-04-2026Last modifiedVulnerability information updated.
Description
Security update for libssh This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#1258045). - CVE-2026-0966: buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054). - CVE-2026-0967: specially crafted patterns could cause denial of service (bsc#1258081). - CVE-2026-0968: malformed SFTP message can lead to out of bound read (bsc#1258080). - CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler (bsc#1259377).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- libssh&distro=SUSE Linux Enterprise Micro 5.3< 0.9.8-150400.3.17.1
- libssh&distro=SUSE Linux Enterprise Micro 5.4< 0.9.8-150400.3.17.1
- libssh&distro=SUSE Linux Enterprise Micro 5.5< 0.9.8-150400.3.17.1
1 vendor · 3 products