libssh2: version bump/CVE fixes