mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-08-09 05:39:37 +00:00
4ae2ec4620
A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash. Reference: https://security-tracker.debian.org/tracker/CVE-2025-8114 Upstream-patch: https://git.libssh.org/projects/libssh.git/commit/?id=53ac23ded4cb2c5463f6c4cd1525331bd578812d Signed-off-by: Divya Chellam <divya.chellam@windriver.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>