Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:19401

HIGH7.1

Red Hat Security Advisory: libssh security update

Published Nov 3, 2025

Modified Yesterday

Fix available

Affected Packages

Red Hat:rhel_aus:8.4::appstreamlibssh

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::appstreamlibssh-config

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::appstreamlibssh-debuginfo

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::appstreamlibssh-debugsource

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::appstreamlibssh-devel

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::baseoslibssh

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::baseoslibssh-config

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::baseoslibssh-debuginfo

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::baseoslibssh-debugsource

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_aus:8.4::baseoslibssh-devel

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::appstreamlibssh

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::appstreamlibssh-config

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::appstreamlibssh-debuginfo

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::appstreamlibssh-debugsource

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::appstreamlibssh-devel

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::baseoslibssh

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::baseoslibssh-config

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::baseoslibssh-debuginfo

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::baseoslibssh-debugsource

Fixed in:

0:0.9.4-2.el8_4.1

Red Hat:rhel_eus_long_life:8.4::baseoslibssh-devel

Fixed in:

0:0.9.4-2.el8_4.1

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19401 REPORThttps://access.redhat.com/security/cve/CVE-2025-5318 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2369131 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-5318 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19401.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-5318 ARTICLEhttps://www.libssh.org/security/advisories/CVE-2025-5318.txt

CVSS Analysis

CVSS v3.1

7.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

LowA:L

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Upstream

CVE-2025-5318

Ecosystems

Red Hat rhel_aus 8.4 appstream Red Hat rhel_aus 8.4 baseos Red Hat rhel_eus_long_life 8.4 appstream Red Hat rhel_eus_long_life 8.4 baseos

Timeline

PublishedNov 3, 2025

ModifiedJan 14, 2026

RHSA-2025:19401 | Mondoo Vulnerability Intelligence