[DSA 6410-1] libssh security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6410-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
August 02, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libssh
CVE ID         : CVE-2026-0964 CVE-2026-0965 CVE-2026-0966 CVE-2026-0967
                 CVE-2026-0968 CVE-2026-3731 CVE-2026-15370 CVE-2026-59843
                 CVE-2026-59844 CVE-2026-59845 CVE-2026-59846 CVE-2026-59847
                 CVE-2026-59848 CVE-2026-59849 CVE-2026-59850
Debian Bug     : 1127693 1142537

Several vulnerabilities were discovered in libssh, a tiny C SSH library,
which may result in denial of service, information disclosure and
potentially the execution of arbitrary code.

For the stable distribution (trixie), these problems have been fixed in
version 0.11.5-0+deb13u1.

We recommend that you upgrade your libssh packages.

For the detailed security status of libssh please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/libssh

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=T0L+
-----END PGP SIGNATURE-----