This update addresses CVE-2026-7598, a potential heap buffer overflow, which could be triggered remotely by supplying very long username and/or password strings.

Source: Fedora 43 libssh2 Important Heap Overflow CVE-2026-7598