Divya Chellam 4ae2ec4620 libssh : fix CVE-2025-8114 ...

A flaw was found in libssh, a library that implements the SSH protocol.
When calculating the session ID during the key exchange (KEX) process,
an allocation failure in cryptographic functions may lead to a NULL
pointer dereference. This issue can cause the client or server to crash.

Reference:
https://security-tracker.debian.org/tracker/CVE-2025-8114

Upstream-patch:
https://git.libssh.org/projects/libssh.git/commit/?id=53ac23ded4cb2c5463f6c4cd1525331bd578812d

Signed-off-by: Divya Chellam <divya.chellam@windriver.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>

2025-11-30 15:13:57 +01:00

..

libssh

libssh : fix CVE-2025-8114

2025-11-30 15:13:57 +01:00

libssh_0.8.9.bb

libssh : fix CVE-2025-8114

2025-11-30 15:13:57 +01:00