Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-52936 EUVD-2025-28479GHSA-7wr7-q3ph-825q

Improper Link Resolution Before File Access vulnerability in yrutschle/sslh

Published Jun 23, 2025 · Updated Aug 1, 2026 · Assigned by GovTech CSG

Description

Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2.

Affected products

VendorProductAffectedFixed
yrutschle sslh — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 sslh 2.3.1-1 —
Debian 13 sslh No fix yet —
Debian 12 sslh 1.20-1+deb12u1 —
Debian 11 sslh 1.20-1+deb11u1 DLA-4238-1
ReleasePackageFixed inAdvisory
Ubuntu 26.10 sslh No fix yet —
Ubuntu 26.04 LTS sslh 2.1.4-1ubuntu0.26.04.1 USN-8360-1
Ubuntu 25.10 sslh 2.1.4-1ubuntu0.25.10.1 USN-8360-1
Ubuntu 22.04 LTS sslh 1.20-1+deb11u1build0.22.04.1 USN-8360-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS sslh 1.22c-1ubuntu0.1~esm1 USN-8360-1
Ubuntu Pro 20.04 LTS sslh 1.20-1+deb11u1build0.20.04.1 USN-8360-1
Ubuntu Pro 18.04 LTS sslh 1.18-1ubuntu0.1~esm1 USN-8360-1
Ubuntu Pro 16.04 LTS sslh 1.17-2ubuntu0.1~esm1 USN-8360-1

Advisories 2

References