[CLSA-2026:1791898496] Fix of 6 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-13 13:35:12 UTC

Description:

   * Fix CVE-2026-58050 (publickey.c attribute-count multiplication
     overflow), CVE-2026-58051 (publickey.c arbitrary free via
     uninitialised list entry)
   * Fix double-free of receive_packet in the publickey subsystem
     (no CVE, upstream 86301ab5 / #1699)

CVEs fixed:

CVE-2025-15661
CVE-2026-55199
CVE-2026-55200
CVE-2026-58050
CVE-2026-58051
CVE-2026-7598

Updated packages:

alt-libssh2_1.11.1-1.7_amd64.deb
sha:122c4c974cad1bb5a0a009ffcdfd2527c7b3a8ab
alt-libssh2-dev_1.11.1-1.7_amd64.deb
sha:7dbedb1c2919dbe2cd9bcbbf250b029c73f31eb1

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.