Important: libssh security update (Amazon Linux 2023)

Summary

Fixed packages 5

Vulnerabilities 1

• Medium 6.5
  CVE-2026-0966

  Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

  A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited remotely by an attacker during GSSAPI (Generic Security Service Application Program Interface) authenti…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Mar 26, 2026

References

• web
  https://alas.aws.amazon.com/cve/html/CVE-2026-0966.html