SB2026031537 - openEuler 24.03 LTS update for libssh

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2026-0965)

The vulnerability allows a local user to crash the application.

The vulnerability exists due to insufficient validation of user-supplied input when parsing configuration filers. A local user can supply a specially crafted configuration and crash the application.

2) Buffer underflow (CVE-ID: CVE-2026-0966)

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error within the ssh_get_hexa() function when reading zero-length input during GSSAPI authentication. A remote attacker can send specially crafted data to the application and perform a denial of service attack. 

3) Out-of-bounds read (CVE-ID: CVE-2026-0968)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the sftp_parse_longname() function. A malicious SFTP server can send a specially crafted SSH_FXP_NAME message to trigger an out-of-bounds read and crash the application or read parts of system memory on the client system. 

Remediation

Install update from vendor's website.

References

• https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-1563