SUSE-SU-2026:1310-1

Опубликовано: 14 апр. 2026

Источник: suse-cvrf

Описание

Security update for libssh

This update for libssh fixes the following issues:

CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler (bsc#1259377).

Список пакетов

Container bci/bci-sle15-kernel-module-devel:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/gcc:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/golang:1.25

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/golang:1.25-openssl

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/golang:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/node:22

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/openjdk:17

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/openjdk:21

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/openjdk:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/php-apache:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/php-fpm:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/php:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/python:3

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/python:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/ruby:2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/ruby:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/rust:1.95

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/rust:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container bci/spack:latest

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container private-registry/1.2/harbor-trivy-adapter:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container private-registry/harbor-trivy-adapter:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/git:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/kea:2.6

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/kiosk/firefox-esr:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/manager/5.0/x86_64/server:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/postgres:16

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/postgres:16.14

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/postgres:17

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/postgres:17.10

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/postgres:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Container suse/sle15:latest

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-Azure-3P

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-Azure-Basic

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-Azure-Standard

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-BYOS

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-CHOST-BYOS

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-CHOST-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-CHOST-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-CHOST-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-CHOST-BYOS-GDC

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-EC2-ECS-HVM

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC-BYOS

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-HPC-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-Hardened-BYOS

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-Hardened-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-Hardened-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-Hardened-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Azure

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Azure-3P

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-BYOS

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-EC2

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-GCE

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAP-Hardened-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP6-SAPCAL

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP6-SAPCAL-Azure

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP6-SAPCAL-EC2

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP6-SAPCAL-GCE

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP7-Azure-3P

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-Azure-Basic

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-Azure-Standard

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-CHOST-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-CHOST-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-CHOST-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-CHOST-BYOS-GDC

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-EC2-ECS-HVM

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-GCE-3P

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-HPC-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-HPC-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-HPC-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-HPC-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-Hardened-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-Hardened-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-Hardened-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-Azure-3P

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-GCE-3P

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-Hardened-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAP-Hardened-GCE

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image SLES15-SP7-SAPCAL-Azure

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP7-SAPCAL-EC2

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image SLES15-SP7-SAPCAL-GCE

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Image monitoring-alertmanager-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image monitoring-blackbox_exporter-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image monitoring-prometheus-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image pr_15_7

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image pr_15_7_1_0

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image proxy-httpd-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image proxy-salt-broker-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image server-database-migration-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image server-hub-xmlrpc-api-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image server-image-sles15sp7

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

Image server-saline-image

libssh-config-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

openSUSE Leap 15.6

libssh-config-0.9.8-150600.11.12.1

libssh-devel-0.9.8-150600.11.12.1

libssh4-0.9.8-150600.11.12.1

libssh4-32bit-0.9.8-150600.11.12.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261310-1/
Link for SUSE-SU-2026:1310-1
https://lists.suse.com/pipermail/sle-updates/2026-April/045516.html
E-Mail link for SUSE-SU-2026:1310-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1259377
SUSE Bug 1259377
https://www.suse.com/security/cve/CVE-2026-3731/
SUSE CVE CVE-2026-3731 page

Описание

A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. The attack may be performed from remote. Upgrading to version 0.11.4 and 0.12.0 is sufficient to resolve this issue. This patch is called 855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60. You should upgrade the affected component.

Затронутые продукты

Container bci/bci-sle15-kernel-module-devel:latest:libssh-config-0.9.8-150600.11.12.1

Container bci/bci-sle15-kernel-module-devel:latest:libssh4-0.9.8-150600.11.12.1

Container bci/gcc:latest:libssh-config-0.9.8-150600.11.12.1

Container bci/gcc:latest:libssh4-0.9.8-150600.11.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-3731.html
CVE-2026-3731
https://bugzilla.suse.com/1259377
SUSE Bug 1259377