diff --git a/security/libssh/Makefile b/security/libssh/Makefile
index ee1c50838791..be4f25adb218 100644
--- a/security/libssh/Makefile
+++ b/security/libssh/Makefile
@@ -1,73 +1,73 @@
 PORTNAME=	libssh
-PORTVERSION=	0.11.1
+PORTVERSION=	0.11.2
 CATEGORIES=	security devel
 MASTER_SITES=	https://www.libssh.org/files/${PORTVERSION:R}/
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Library implementing the SSH2 protocol
 WWW=		https://www.libssh.org/ \
 		https://gitlab.com/libssh/libssh-mirror
 
 LICENSE=	LGPL21
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 TEST_DEPENDS=	cmocka>=0:sysutils/cmocka
 
 USES=		cmake:testing cpe pathfix tar:xz
 
 CMAKE_ARGS=	-DCMAKE_CTEST_ARGUMENTS="-E;'torture_config|torture_misc'" \
 		-DGLOBAL_BIND_CONFIG=${PREFIX}/etc/ssh/libssh_server_config \
 		-DGLOBAL_CLIENT_CONFIG=${PREFIX}/etc/ssh/ssh_config
 CMAKE_OFF=	CLIENT_TESTING \
 		CMAKE_DISABLE_FIND_PACKAGE_Doxygen \
 		FUZZ_TESTING \
 		GSSAPI_TESTING \
 		PICKY_DEVELOPER \
 		SERVER_TESTING \
 		UNIT_TESTING \
 		WITH_ABI_BREAK \
 		WITH_BENCHMARKS \
 		WITH_BLOWFISH_CIPHER \
 		WITH_COVERAGE \
 		WITH_DEBUG_CALLTRACE \
 		WITH_DEBUG_CRYPTO \
 		WITH_DEBUG_PACKET \
 		WITH_EXAMPLES \
 		WITH_INSECURE_NONE \
 		WITH_INTERNAL_DOC \
 		WITH_MBEDTLS \
 		WITH_NACL \
 		WITH_PKCS11_PROVIDER \
 		WITH_PKCS11_URI
 CMAKE_ON=	BUILD_SHARED_LIBS \
 		WITH_EXEC \
 		WITH_GEX \
 		WITH_PCAP \
 		WITH_SERVER \
 		WITH_SFTP \
 		WITH_SYMBOL_VERSIONING \
 		WITH_ZLIB
 CMAKE_TESTING_ON=	UNIT_TESTING
 USE_LDCONFIG=	yes
 
 OPTIONS_DEFINE=	OPENSSL STATIC
 OPTIONS_SINGLE=	GSSAPI
 OPTIONS_SINGLE_GSSAPI=	GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
 OPTIONS_DEFAULT=GSSAPI_BASE OPENSSL STATIC
 OPTIONS_SUB=	yes
 
 GSSAPI_BASE_CMAKE_ON=	-DKRB5_CONFIG=${KRB5CONFIG} -DWITH_GSSAPI=ON
 GSSAPI_BASE_USES=	gssapi:base,flags
 GSSAPI_HEIMDAL_CMAKE_ON=-DKRB5_CONFIG=${KRB5CONFIG} -DWITH_GSSAPI=ON
 GSSAPI_HEIMDAL_USES=	gssapi:heimdal,flags
 GSSAPI_MIT_CMAKE_ON=	-DKRB5_CONFIG=${KRB5CONFIG} -DWITH_GSSAPI=ON
 GSSAPI_MIT_USES=	gssapi:mit,flags
 GSSAPI_NONE_CMAKE_BOOL_OFF=	WITH_GSSAPI
 OPENSSL_CMAKE_BOOL_OFF=	CMAKE_DISABLE_FIND_PACKAGE_OpenSSL
 OPENSSL_USES=		ssl
 STATIC_CMAKE_BOOL=	BUILD_STATIC_LIB
 
 post-install-STATIC-on:
 	${INSTALL_DATA} ${INSTALL_WRKSRC}/src/libssh.a ${STAGEDIR}${PREFIX}/lib/
 
 .include <bsd.port.mk>
diff --git a/security/libssh/distinfo b/security/libssh/distinfo
index 0e436ba6518b..a859147ae5e3 100644
--- a/security/libssh/distinfo
+++ b/security/libssh/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1725559589
-SHA256 (libssh-0.11.1.tar.xz) = 14b7dcc72e91e08151c58b981a7b570ab2663f630e7d2837645d5a9c612c1b79
-SIZE (libssh-0.11.1.tar.xz) = 621108
+TIMESTAMP = 1750954132
+SHA256 (libssh-0.11.2.tar.xz) = 69529fc18f5b601f0baf0e5a4501a2bc26df5e2f116f5f8f07f19fafaa6d04e7
+SIZE (libssh-0.11.2.tar.xz) = 619428
diff --git a/security/libssh/pkg-plist b/security/libssh/pkg-plist
index 0907bfdd05e4..4843dee1421d 100644
--- a/security/libssh/pkg-plist
+++ b/security/libssh/pkg-plist
@@ -1,17 +1,17 @@
 include/libssh/callbacks.h
 include/libssh/legacy.h
 include/libssh/libssh.h
 include/libssh/libssh_version.h
 include/libssh/libsshpp.hpp
 include/libssh/server.h
 include/libssh/sftp.h
 include/libssh/sftpserver.h
 include/libssh/ssh2.h
 lib/cmake/libssh/libssh-config-%%CMAKE_BUILD_TYPE%%.cmake
 lib/cmake/libssh/libssh-config-version.cmake
 lib/cmake/libssh/libssh-config.cmake
 %%STATIC%%lib/libssh.a
 lib/libssh.so
 lib/libssh.so.4
-lib/libssh.so.4.10.1
+lib/libssh.so.4.10.2
 libdata/pkgconfig/libssh.pc