These are all security issues fixed in the libssh2-1-1.9.0-3.6 package on the GA media of openSUSE Tumbleweed.
{ "binaries": [ { "libssh2-1": "1.9.0-3.6", "libssh2-devel": "1.9.0-3.6", "libssh2-1-32bit": "1.9.0-3.6" } ] }