Detection of Error Condition Without Action Affecting libssh-debugsource package, versions <0:0.9.6-17.el8_10


Severity

Recommended
0.0
medium
0
10

Based on Rocky Linux security rating.

Threat Intelligence

EPSS
0.1% (1st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ROCKY8-LIBSSHDEBUGSOURCE-19507322
  • published3 Sept 2026
  • disclosed21 Jul 2026

Introduced: 21 Jul 2026

CVE-2026-59845  (opens in a new tab)
CWE-390  (opens in a new tab)

How to fix?

Upgrade Rocky-Linux:8 libssh-debugsource to version 0:0.9.6-17.el8_10 or higher.
This issue was patched in RLSA-2026:62218.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libssh-debugsource package and not the libssh-debugsource package as distributed by Rocky-Linux. See How to fix? for Rocky-Linux:8 relevant fixed versions and status.

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.

CVSS Base Scores

version 3.1