From: Joshua Rogers <MegaManSec@users.noreply.github.com>
Date: Fri, 22 May 2026 07:48:15 +0000 (+0200)
Subject: libssh: map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH
X-Git-Tag: rc-8_21_0-1~66
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0b8dbbc63c98777e4584cb9fbd71df3464008ad1;p=thirdparty%2Fcurl.git

libssh: map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH

Host key type mismatch from libssh was incorrectly reported as missing,
causing key callbacks to accept instead of reject.

Reported by: Joshua Rogers (Aisle Research)
Closes #21724
---

diff --git a/lib/vssh/libssh.c b/lib/vssh/libssh.c
index 09084765bc..817a463a2c 100644
--- a/lib/vssh/libssh.c
+++ b/lib/vssh/libssh.c
@@ -277,6 +277,8 @@ static int myssh_is_known(struct Curl_easy *data, struct ssh_conn *sshc)
       keymatch = CURLKHMATCH_OK;
       break;
     case SSH_KNOWN_HOSTS_OTHER:
+      keymatch = CURLKHMATCH_MISMATCH;
+      break;
     case SSH_KNOWN_HOSTS_NOT_FOUND:
     case SSH_KNOWN_HOSTS_UNKNOWN:
     case SSH_KNOWN_HOSTS_ERROR: