Search results

Deadlock in _libssh2_transport_send when a key re-exchange starts while a channel packet is partially sent

Status: Open.

#2110 In libssh2/libssh2;

· vobloeb opened on Jun 21, 2026

AEAD ciphers (chacha20-poly1305, AES-GCM) leak 16 bytes of uninitialized memory per outgoing encrypted packet

Status: Open.

#2023 In libssh2/libssh2;

· afldl opened on Jun 10, 2026

_libssh2_channel_flush() under-counts window refund for DATA packets by 4 bytes

Status: Open.

#2020 In libssh2/libssh2;

· afldl opened on Jun 10, 2026

sftp_readdir() uses server-supplied num_names without validation — stuck state and memory leak

Status: Open.

#2018 In libssh2/libssh2;

· afldl opened on Jun 10, 2026

SFTP readdir response bypasses LIBSSH2_SFTP_PACKET_MAXLEN, allowing unbounded allocation (~4GB)

Status: Open.

#2017 In libssh2/libssh2;

· afldl opened on Jun 10, 2026

Memory leak: re-entrant transport read during KEX leaves session->packet.payload unfreed

Status: Open.

#1956 In libssh2/libssh2;

· OwenSanzas opened on May 31, 2026

Request for release (v1.11.2) to address CVE-2026-7598(integer overflow)

Status: Open.

#1925 In libssh2/libssh2;

· yeshwanthyeah-ship-it opened on May 8, 2026

ssh2_exec() silently fails with OpenSSL 3.0.18 on Debian 12.13 (works with 3.0.17)

Status: Open.

#1840 In libssh2/libssh2;

· MagnaCapax opened on Apr 9, 2026

ECDH key exchange fails with OpenSSL 3: compressed EC point sent instead of uncompressed

Status: Open.

#1819 In libssh2/libssh2;

· rlerdorf opened on Mar 17, 2026

To avoid interfering with auth, send keepalives at the end of the interval instead of the beginning

Status: Open.

#1810 In libssh2/libssh2;

· MatrixManAtYrService opened on Mar 1, 2026

Tests fail when building Debian testing package - test_sshd.test 1 - sshd-test_ssh2

Status: Open.

#1808 In libssh2/libssh2;

· babelouest opened on Feb 27, 2026

Single-session, multi-channel issue

Status: Open.

#1801 In libssh2/libssh2;

· 1dao opened on Feb 12, 2026