Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:19098

HIGH7.1

Red Hat Security Advisory: libssh security update

Published Oct 27, 2025

Modified Yesterday

Fix available

Affected Packages

Red Hat:rhel_aus:8.6::appstreamlibssh

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::appstreamlibssh-config

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::appstreamlibssh-debuginfo

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::appstreamlibssh-debugsource

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::appstreamlibssh-devel

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::baseoslibssh

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::baseoslibssh-config

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::baseoslibssh-debuginfo

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::baseoslibssh-debugsource

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_aus:8.6::baseoslibssh-devel

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::appstreamlibssh

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::appstreamlibssh-config

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::appstreamlibssh-debuginfo

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::appstreamlibssh-debugsource

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::appstreamlibssh-devel

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::baseoslibssh

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::baseoslibssh-config

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::baseoslibssh-debuginfo

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::baseoslibssh-debugsource

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_e4s:8.6::baseoslibssh-devel

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::appstreamlibssh

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::appstreamlibssh-config

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::appstreamlibssh-debuginfo

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::appstreamlibssh-debugsource

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::appstreamlibssh-devel

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::baseoslibssh

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::baseoslibssh-config

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::baseoslibssh-debuginfo

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::baseoslibssh-debugsource

Fixed in:

0:0.9.6-4.el8_6.1

Red Hat:rhel_tus:8.6::baseoslibssh-devel

Fixed in:

0:0.9.6-4.el8_6.1

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19098 REPORThttps://access.redhat.com/security/cve/CVE-2025-5318 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2369131 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-5318 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19098.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-5318 ARTICLEhttps://www.libssh.org/security/advisories/CVE-2025-5318.txt

CVSS Analysis

CVSS v3.1

7.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

LowA:L

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Upstream

Ecosystems

Red Hat rhel_aus 8.6 appstream Red Hat rhel_aus 8.6 baseos Red Hat rhel_e4s 8.6 appstream Red Hat rhel_e4s 8.6 baseos Red Hat rhel_tus 8.6 appstream Red Hat rhel_tus 8.6 baseos

Timeline

PublishedOct 27, 2025

ModifiedJan 14, 2026

RHSA-2025:19098 | Mondoo Vulnerability Intelligence