OESA-2025-2342

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2342
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2342.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-2342
Upstream
Published
2025-09-26T13:09:14Z
Modified
2025-09-26T13:34:47.218800Z
Summary
libssh security update
Details

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).

Security Fix(es):

A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.(CVE-2025-8277)

Database specific 
{
    "severity": "Low"
}
References

Affected packages

openEuler:20.03-LTS-SP4

libssh

Package

Name
libssh
Purl
pkg:rpm/openEuler/libssh&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.9.4-13.oe2003sp4

Ecosystem specific 

{
    "aarch64": [
        "libssh-0.9.4-13.oe2003sp4.aarch64.rpm",
        "libssh-debuginfo-0.9.4-13.oe2003sp4.aarch64.rpm",
        "libssh-debugsource-0.9.4-13.oe2003sp4.aarch64.rpm",
        "libssh-devel-0.9.4-13.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "libssh-0.9.4-13.oe2003sp4.src.rpm"
    ],
    "noarch": [
        "libssh-help-0.9.4-13.oe2003sp4.noarch.rpm"
    ],
    "x86_64": [
        "libssh-0.9.4-13.oe2003sp4.x86_64.rpm",
        "libssh-debuginfo-0.9.4-13.oe2003sp4.x86_64.rpm",
        "libssh-debugsource-0.9.4-13.oe2003sp4.x86_64.rpm",
        "libssh-devel-0.9.4-13.oe2003sp4.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP3

libssh

Package

Name
libssh
Purl
pkg:rpm/openEuler/libssh&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.9.6-13.oe2203sp3

Ecosystem specific 

{
    "aarch64": [
        "libssh-0.9.6-13.oe2203sp3.aarch64.rpm",
        "libssh-debuginfo-0.9.6-13.oe2203sp3.aarch64.rpm",
        "libssh-debugsource-0.9.6-13.oe2203sp3.aarch64.rpm",
        "libssh-devel-0.9.6-13.oe2203sp3.aarch64.rpm"
    ],
    "src": [
        "libssh-0.9.6-13.oe2203sp3.src.rpm"
    ],
    "noarch": [
        "libssh-help-0.9.6-13.oe2203sp3.noarch.rpm"
    ],
    "x86_64": [
        "libssh-0.9.6-13.oe2203sp3.x86_64.rpm",
        "libssh-debuginfo-0.9.6-13.oe2203sp3.x86_64.rpm",
        "libssh-debugsource-0.9.6-13.oe2203sp3.x86_64.rpm",
        "libssh-devel-0.9.6-13.oe2203sp3.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP4

libssh

Package

Name
libssh
Purl
pkg:rpm/openEuler/libssh&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.9.6-13.oe2203sp4

Ecosystem specific 

{
    "aarch64": [
        "libssh-0.9.6-13.oe2203sp4.aarch64.rpm",
        "libssh-debuginfo-0.9.6-13.oe2203sp4.aarch64.rpm",
        "libssh-debugsource-0.9.6-13.oe2203sp4.aarch64.rpm",
        "libssh-devel-0.9.6-13.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "libssh-0.9.6-13.oe2203sp4.src.rpm"
    ],
    "noarch": [
        "libssh-help-0.9.6-13.oe2203sp4.noarch.rpm"
    ],
    "x86_64": [
        "libssh-0.9.6-13.oe2203sp4.x86_64.rpm",
        "libssh-debuginfo-0.9.6-13.oe2203sp4.x86_64.rpm",
        "libssh-debugsource-0.9.6-13.oe2203sp4.x86_64.rpm",
        "libssh-devel-0.9.6-13.oe2203sp4.x86_64.rpm"
    ]
}

openEuler:24.03-LTS

libssh

Package

Name
libssh
Purl
pkg:rpm/openEuler/libssh&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.5-7.oe2403sp2

Ecosystem specific 

{
    "aarch64": [
        "libssh-0.10.5-7.oe2403.aarch64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403.aarch64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403.aarch64.rpm",
        "libssh-devel-0.10.5-7.oe2403.aarch64.rpm",
        "libssh-0.10.5-7.oe2403sp1.aarch64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp1.aarch64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp1.aarch64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp1.aarch64.rpm",
        "libssh-0.10.5-7.oe2403sp2.aarch64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp2.aarch64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp2.aarch64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp2.aarch64.rpm"
    ],
    "src": [
        "libssh-0.10.5-7.oe2403.src.rpm",
        "libssh-0.10.5-7.oe2403sp1.src.rpm",
        "libssh-0.10.5-7.oe2403sp2.src.rpm"
    ],
    "noarch": [
        "libssh-help-0.10.5-7.oe2403.noarch.rpm",
        "libssh-help-0.10.5-7.oe2403sp1.noarch.rpm",
        "libssh-help-0.10.5-7.oe2403sp2.noarch.rpm"
    ],
    "x86_64": [
        "libssh-0.10.5-7.oe2403.x86_64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403.x86_64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403.x86_64.rpm",
        "libssh-devel-0.10.5-7.oe2403.x86_64.rpm",
        "libssh-0.10.5-7.oe2403sp1.x86_64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp1.x86_64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp1.x86_64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp1.x86_64.rpm",
        "libssh-0.10.5-7.oe2403sp2.x86_64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp2.x86_64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp2.x86_64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp2.x86_64.rpm"
    ]
}

openEuler:24.03-LTS-SP1

libssh

Package

Name
libssh
Purl
pkg:rpm/openEuler/libssh&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.5-7.oe2403sp1

Ecosystem specific 

{
    "aarch64": [
        "libssh-0.10.5-7.oe2403sp1.aarch64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp1.aarch64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp1.aarch64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "libssh-0.10.5-7.oe2403sp1.src.rpm"
    ],
    "noarch": [
        "libssh-help-0.10.5-7.oe2403sp1.noarch.rpm"
    ],
    "x86_64": [
        "libssh-0.10.5-7.oe2403sp1.x86_64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp1.x86_64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp1.x86_64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp1.x86_64.rpm"
    ]
}

openEuler:24.03-LTS-SP2

libssh

Package

Name
libssh
Purl
pkg:rpm/openEuler/libssh&distro=openEuler-24.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.5-7.oe2403sp2

Ecosystem specific 

{
    "aarch64": [
        "libssh-0.10.5-7.oe2403sp2.aarch64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp2.aarch64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp2.aarch64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp2.aarch64.rpm"
    ],
    "src": [
        "libssh-0.10.5-7.oe2403sp2.src.rpm"
    ],
    "noarch": [
        "libssh-help-0.10.5-7.oe2403sp2.noarch.rpm"
    ],
    "x86_64": [
        "libssh-0.10.5-7.oe2403sp2.x86_64.rpm",
        "libssh-debuginfo-0.10.5-7.oe2403sp2.x86_64.rpm",
        "libssh-debugsource-0.10.5-7.oe2403sp2.x86_64.rpm",
        "libssh-devel-0.10.5-7.oe2403sp2.x86_64.rpm"
    ]
}