From: Berner Martin <martin.berner@qualitasag.ch>
Date: Tue, 07 Jul 2026 08:38:34 GMT
Subject: CVE-2026-55200 libssh2
Message-ID: <ZR5P278MB19814B2CA717210492C13A73F0F02@ZR5P278MB1981.CHEP278.PROD.OUTLOOK.COM>

Hello,
The libssh2 library appears to be relevant in the Git for Windows build. Git depends on libcurl, and libcurl in turn depends on libssh2.
However, even in the latest build, the version still appears to be 1.11.1, which I understand may be affected by vulnerability CVE-2026-55200.
Is that correct? If so, when can a patched build be expected?

Kind regards,
Martin Berner