[CLSA-2026:1791903533] Fix of 6 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-13 14:59:08 UTC

Description:

   * Fix CVE-2026-58050 (publickey.c attribute-count multiplication
     overflow), CVE-2026-58051 (publickey.c arbitrary free via
     uninitialised list entry)
   * Fix double-free of receive_packet in the publickey subsystem
     (no CVE, upstream 86301ab5 / #1699)

CVEs fixed:

CVE-2025-15661
CVE-2026-55199
CVE-2026-55200
CVE-2026-58050
CVE-2026-58051
CVE-2026-7598

Updated packages:

alt-libssh2_1.11.1-1.7_amd64.deb
sha:71654875a9475a52c52d8fcefe6e8daca53fcb53
alt-libssh2-dev_1.11.1-1.7_amd64.deb
sha:6274b6a0ed4becac6aa15df6aedc988a237b350e

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.