<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for libssh</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2025:3788-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2025-10-24T13:28:58Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2025-10-24T13:28:58Z</InitialReleaseDate>
    <CurrentReleaseDate>2025-10-24T13:28:58Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for libssh</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for libssh fixes the following issues:

- CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is
  repeated with incorrect guesses (bsc#1249375).
- CVE-2025-8114: NULL pointer dereference when an allocation error happens during the calculation of the KEX session ID
  (bsc#1246974).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Container suse/sle-micro-rancher/5.3:latest-2025-3788,Container suse/sle-micro-rancher/5.4:latest-2025-3788,Container suse/sle-micro/5.3/toolbox:latest-2025-3788,Container suse/sle-micro/5.4/toolbox:latest-2025-3788,Container suse/sle-micro/5.5/toolbox:latest-2025-3788,Container suse/sle-micro/base-5.5:latest-2025-3788,Container suse/sle-micro/kvm-5.5:latest-2025-3788,Container suse/sle-micro/rt-5.5:latest-2025-3788,Image SLES15-SP4-Micro-5-3-2025-3788,Image SLES15-SP4-Micro-5-3-BYOS-2025-3788,Image SLES15-SP4-Micro-5-3-BYOS-Azure-2025-3788,Image SLES15-SP4-Micro-5-3-BYOS-EC2-2025-3788,Image SLES15-SP4-Micro-5-3-BYOS-GCE-2025-3788,Image SLES15-SP4-Micro-5-3-EC2-2025-3788,Image SLES15-SP4-Micro-5-4-BYOS-2025-3788,Image SLES15-SP4-Micro-5-4-BYOS-Azure-2025-3788,Image SLES15-SP4-Micro-5-4-BYOS-EC2-2025-3788,Image SLES15-SP4-Micro-5-4-BYOS-GCE-2025-3788,Image SLES15-SP4-Micro-5-4-GCE-2025-3788,Image SLES15-SP5-Micro-5-5-2025-3788,Image SLES15-SP5-Micro-5-5-Azure-2025-3788,Image SLES15-SP5-Micro-5-5-BYOS-2025-3788,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2025-3788,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2025-3788,Image SLES15-SP5-Micro-5-5-EC2-2025-3788,SUSE-2025-3788,SUSE-SLE-Micro-5.3-2025-3788,SUSE-SLE-Micro-5.4-2025-3788,SUSE-SLE-Micro-5.5-2025-3788</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2025/suse-su-20253788-1/</URL>
      <Description>Link for SUSE-SU-2025:3788-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-updates/2025-October/042299.html</URL>
      <Description>E-Mail link for SUSE-SU-2025:3788-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1246974</URL>
      <Description>SUSE Bug 1246974</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1249375</URL>
      <Description>SUSE Bug 1249375</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-8114/</URL>
      <Description>SUSE CVE CVE-2025-8114 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-8277/</URL>
      <Description>SUSE CVE CVE-2025-8277 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="Container suse/sle-micro-rancher/5.3:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro-rancher/5.3:latest">
        <FullProductName ProductID="Container suse/sle-micro-rancher/5.3:latest">Container suse/sle-micro-rancher/5.3:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container suse/sle-micro-rancher/5.4:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro-rancher/5.4:latest">
        <FullProductName ProductID="Container suse/sle-micro-rancher/5.4:latest">Container suse/sle-micro-rancher/5.4:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container suse/sle-micro/5.3/toolbox:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro/5.3/toolbox:latest">
        <FullProductName ProductID="Container suse/sle-micro/5.3/toolbox:latest">Container suse/sle-micro/5.3/toolbox:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container suse/sle-micro/5.4/toolbox:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro/5.4/toolbox:latest">
        <FullProductName ProductID="Container suse/sle-micro/5.4/toolbox:latest">Container suse/sle-micro/5.4/toolbox:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container suse/sle-micro/5.5/toolbox:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro/5.5/toolbox:latest">
        <FullProductName ProductID="Container suse/sle-micro/5.5/toolbox:latest">Container suse/sle-micro/5.5/toolbox:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container suse/sle-micro/base-5.5:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro/base-5.5:latest">
        <FullProductName ProductID="Container suse/sle-micro/base-5.5:latest">Container suse/sle-micro/base-5.5:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container suse/sle-micro/kvm-5.5:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro/kvm-5.5:latest">
        <FullProductName ProductID="Container suse/sle-micro/kvm-5.5:latest">Container suse/sle-micro/kvm-5.5:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container suse/sle-micro/rt-5.5:latest">
      <Branch Type="Product Name" Name="Container suse/sle-micro/rt-5.5:latest">
        <FullProductName ProductID="Container suse/sle-micro/rt-5.5:latest">Container suse/sle-micro/rt-5.5:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-3">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-3">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-3">Image SLES15-SP4-Micro-5-3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-3-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-3-BYOS">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS">Image SLES15-SP4-Micro-5-3-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-3-BYOS-Azure">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-3-BYOS-Azure">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-Azure">Image SLES15-SP4-Micro-5-3-BYOS-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-3-BYOS-EC2">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-3-BYOS-EC2">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-EC2">Image SLES15-SP4-Micro-5-3-BYOS-EC2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-3-BYOS-GCE">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-3-BYOS-GCE">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-GCE">Image SLES15-SP4-Micro-5-3-BYOS-GCE</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-3-EC2">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-3-EC2">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-EC2">Image SLES15-SP4-Micro-5-3-EC2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-4-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-4-BYOS">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS">Image SLES15-SP4-Micro-5-4-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-4-BYOS-Azure">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-4-BYOS-Azure">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-Azure">Image SLES15-SP4-Micro-5-4-BYOS-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-4-BYOS-EC2">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-4-BYOS-EC2">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-EC2">Image SLES15-SP4-Micro-5-4-BYOS-EC2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-4-BYOS-GCE">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-4-BYOS-GCE">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-GCE">Image SLES15-SP4-Micro-5-4-BYOS-GCE</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Micro-5-4-GCE">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Micro-5-4-GCE">
        <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-GCE">Image SLES15-SP4-Micro-5-4-GCE</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-Micro-5-5">
      <Branch Type="Product Name" Name="Image SLES15-SP5-Micro-5-5">
        <FullProductName ProductID="Image SLES15-SP5-Micro-5-5">Image SLES15-SP5-Micro-5-5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-Micro-5-5-Azure">
      <Branch Type="Product Name" Name="Image SLES15-SP5-Micro-5-5-Azure">
        <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-Azure">Image SLES15-SP5-Micro-5-5-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-Micro-5-5-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP5-Micro-5-5-BYOS">
        <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS">Image SLES15-SP5-Micro-5-5-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-Micro-5-5-BYOS-Azure">
      <Branch Type="Product Name" Name="Image SLES15-SP5-Micro-5-5-BYOS-Azure">
        <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS-Azure">Image SLES15-SP5-Micro-5-5-BYOS-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-Micro-5-5-BYOS-EC2">
      <Branch Type="Product Name" Name="Image SLES15-SP5-Micro-5-5-BYOS-EC2">
        <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS-EC2">Image SLES15-SP5-Micro-5-5-BYOS-EC2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP5-Micro-5-5-EC2">
      <Branch Type="Product Name" Name="Image SLES15-SP5-Micro-5-5-EC2">
        <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-EC2">Image SLES15-SP5-Micro-5-5-EC2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Micro 5.3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Micro 5.3">
        <FullProductName ProductID="SUSE Linux Enterprise Micro 5.3" CPE="cpe:/o:suse:sle-micro:5.3">SUSE Linux Enterprise Micro 5.3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Micro 5.4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Micro 5.4">
        <FullProductName ProductID="SUSE Linux Enterprise Micro 5.4" CPE="cpe:/o:suse:sle-micro:5.4">SUSE Linux Enterprise Micro 5.4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Micro 5.5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Micro 5.5">
        <FullProductName ProductID="SUSE Linux Enterprise Micro 5.5" CPE="cpe:/o:suse:sle-micro:5.5">SUSE Linux Enterprise Micro 5.5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libssh-config-0.9.8-150400.3.12.1">
      <FullProductName ProductID="libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libssh4-0.9.8-150400.3.12.1">
      <FullProductName ProductID="libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libssh-devel-0.9.8-150400.3.12.1">
      <FullProductName ProductID="libssh-devel-0.9.8-150400.3.12.1">libssh-devel-0.9.8-150400.3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libssh4-32bit-0.9.8-150400.3.12.1">
      <FullProductName ProductID="libssh4-32bit-0.9.8-150400.3.12.1">libssh4-32bit-0.9.8-150400.3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libssh4-64bit-0.9.8-150400.3.12.1">
      <FullProductName ProductID="libssh4-64bit-0.9.8-150400.3.12.1">libssh4-64bit-0.9.8-150400.3.12.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro-rancher/5.3:latest">
      <FullProductName ProductID="Container suse/sle-micro-rancher/5.3:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro-rancher/5.3:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro-rancher/5.3:latest">
      <FullProductName ProductID="Container suse/sle-micro-rancher/5.3:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro-rancher/5.3:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro-rancher/5.4:latest">
      <FullProductName ProductID="Container suse/sle-micro-rancher/5.4:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro-rancher/5.4:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro-rancher/5.4:latest">
      <FullProductName ProductID="Container suse/sle-micro-rancher/5.4:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro-rancher/5.4:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/5.3/toolbox:latest">
      <FullProductName ProductID="Container suse/sle-micro/5.3/toolbox:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/5.3/toolbox:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/5.3/toolbox:latest">
      <FullProductName ProductID="Container suse/sle-micro/5.3/toolbox:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/5.3/toolbox:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/5.4/toolbox:latest">
      <FullProductName ProductID="Container suse/sle-micro/5.4/toolbox:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/5.4/toolbox:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/5.4/toolbox:latest">
      <FullProductName ProductID="Container suse/sle-micro/5.4/toolbox:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/5.4/toolbox:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/5.5/toolbox:latest">
      <FullProductName ProductID="Container suse/sle-micro/5.5/toolbox:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/5.5/toolbox:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/5.5/toolbox:latest">
      <FullProductName ProductID="Container suse/sle-micro/5.5/toolbox:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/5.5/toolbox:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/base-5.5:latest">
      <FullProductName ProductID="Container suse/sle-micro/base-5.5:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/base-5.5:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/base-5.5:latest">
      <FullProductName ProductID="Container suse/sle-micro/base-5.5:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/base-5.5:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/kvm-5.5:latest">
      <FullProductName ProductID="Container suse/sle-micro/kvm-5.5:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/kvm-5.5:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/kvm-5.5:latest">
      <FullProductName ProductID="Container suse/sle-micro/kvm-5.5:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/kvm-5.5:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/rt-5.5:latest">
      <FullProductName ProductID="Container suse/sle-micro/rt-5.5:latest:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/rt-5.5:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sle-micro/rt-5.5:latest">
      <FullProductName ProductID="Container suse/sle-micro/rt-5.5:latest:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Container suse/sle-micro/rt-5.5:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS-Azure">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS-Azure">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-Azure:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS-EC2">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS-EC2">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-EC2:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS-GCE">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-GCE:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-BYOS-GCE">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-BYOS-GCE:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-EC2">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-EC2:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-3-EC2">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-3-EC2:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-3-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS-Azure">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS-Azure">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-Azure:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS-EC2">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS-EC2">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-EC2:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS-GCE">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-GCE:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-BYOS-GCE">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-BYOS-GCE:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-GCE">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-GCE:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Micro-5-4-GCE">
      <FullProductName ProductID="Image SLES15-SP4-Micro-5-4-GCE:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP4-Micro-5-4-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-Azure">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-Azure:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-Azure">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-Azure:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-BYOS">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-BYOS">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-BYOS-Azure">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-BYOS-Azure">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS-Azure:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-BYOS-EC2">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-BYOS-EC2">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-BYOS-EC2:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-EC2">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-EC2:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP5-Micro-5-5-EC2">
      <FullProductName ProductID="Image SLES15-SP5-Micro-5-5-EC2:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of Image SLES15-SP5-Micro-5-5-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.3">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of SUSE Linux Enterprise Micro 5.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.3">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of SUSE Linux Enterprise Micro 5.3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.4">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of SUSE Linux Enterprise Micro 5.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.4">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of SUSE Linux Enterprise Micro 5.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh-config-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.5">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.12.1">libssh-config-0.9.8-150400.3.12.1 as a component of SUSE Linux Enterprise Micro 5.5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libssh4-0.9.8-150400.3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Micro 5.5">
      <FullProductName ProductID="SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.12.1">libssh4-0.9.8-150400.3.12.1 as a component of SUSE Linux Enterprise Micro 5.5</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.</Note>
    </Notes>
    <CVE>CVE-2025-8114</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle-micro-rancher/5.3:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro-rancher/5.3:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro-rancher/5.4:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro-rancher/5.4:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.3/toolbox:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.3/toolbox:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.4/toolbox:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.4/toolbox:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.5/toolbox:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.5/toolbox:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/base-5.5:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/base-5.5:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/kvm-5.5:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/kvm-5.5:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/rt-5.5:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/rt-5.5:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-GCE:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-GCE:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-GCE:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-GCE:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-GCE:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-GCE:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-20253788-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-8114.html</URL>
        <Description>CVE-2025-8114</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1246974</URL>
        <Description>SUSE Bug 1246974</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when using libgcrypt, which impacts application stability and availability.</Note>
    </Notes>
    <CVE>CVE-2025-8277</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sle-micro-rancher/5.3:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro-rancher/5.3:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro-rancher/5.4:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro-rancher/5.4:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.3/toolbox:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.3/toolbox:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.4/toolbox:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.4/toolbox:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.5/toolbox:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/5.5/toolbox:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/base-5.5:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/base-5.5:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/kvm-5.5:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/kvm-5.5:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/rt-5.5:latest:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Container suse/sle-micro/rt-5.5:latest:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-GCE:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS-GCE:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-BYOS:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-3:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-GCE:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS-GCE:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-BYOS:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-GCE:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP4-Micro-5-4-GCE:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-Azure:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-Azure:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-BYOS:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-EC2:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5-EC2:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>Image SLES15-SP5-Micro-5-5:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.3:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.3:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.4:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.4:libssh4-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.5:libssh-config-0.9.8-150400.3.12.1</ProductID>
        <ProductID>SUSE Linux Enterprise Micro 5.5:libssh4-0.9.8-150400.3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-20253788-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-8277.html</URL>
        <Description>CVE-2025-8277</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1249375</URL>
        <Description>SUSE Bug 1249375</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
