Re: [oss-security] libssh2: CVE-2026-55200 (critical), CVE-2025-15661 (high), CVE-2026-55199 (high)

[Sevan Janiyan]

On 24/06/2026 13:14, Sevan Janiyan wrote:

This url point to https://github.com/advisories/GHSA-R8MH-X5QV-7GG2 as the "Definitive source of threat updates" which references another commit separate from the hashes above

https://github.com/libssh2/libssh2/ commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8

via
https://github.com/libssh2/libssh2/pull/2052
"transport.c: Additional boundary checks for packet length"

Ignore this, I was wrong.


Sevan