libssh2: Multiple Vulnerabilities — GLSA 202608-17

{
  "id": "9fb2d3b2edc315a279968f05af609726d90014b067d00859fd1eef77ff4b1165",
  "url": "https://security.gentoo.org/glsa/202608-17",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "libssh2: Multiple Vulnerabilities — GLSA 202608-17",
    "summary": "Multiple vulnerabilities in libssh2 could result in remote code execution. Users should upgrade to version 1.11.1-r2 or later.",
    "evidence": "Multiple vulnerabilities have been found in libssh2, the worst of which could result in remote code execution.",
    "products": [
      {
        "name": {
          "value": "net-libs/libssh2",
          "evidence": "Package net-libs/libssh2 on all architectures"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": ">= 1.11.1-r2",
            "evidence": "Unaffected versions >= 1.11.1-r2"
          }
        ],
        "affected_versions": [
          {
            "value": "< 1.11.1-r2",
            "evidence": "Affected versions < 1.11.1-r2"
          }
        ]
      }
    ],
    "severity": "high",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2025-15661",
        "evidence": "CVE-2025-15661"
      },
      {
        "value": "CVE-2026-7598",
        "evidence": "CVE-2026-7598"
      },
      {
        "value": "CVE-2026-55199",
        "evidence": "CVE-2026-55199"
      },
      {
        "value": "CVE-2026-55200",
        "evidence": "CVE-2026-55200"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity high"
  },
  "source_id": "official-gentoo-glsa",
  "document_id": 23659,
  "published_at": "2026-08-20T00:00:00+00:00"
}