Red Hat Security Advisory: libssh security update

CVE-2025-4877 — libssh: Write beyond bounds in binary to base64 conversion functions CVE-2025-4878 — libssh: Use of uninitialized variable in privatekey_from_file() CVE-2025-5351 — libssh: Double Free Vulnerability in libssh Key Export Functions CVE-2025-8114 — libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation CVE-2025-8277 — libssh: Memory Exhaustion via Repeated Key Exchange in libssh CVE-2026-0964 — libssh: Improper sanitation of paths received from SCP servers CVE-2026-0965 — libssh: libssh: Denial of Service via improper configuration file handling CVE-2026-0966 — libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa() CVE-2026-0967 — libssh: libssh: Denial of Service via inefficient regular expression processing CVE-2026-0968 — libssh: libssh: Denial of Service due to malformed SFTP message