[CLSA-2026:1791902986] Fix of 6 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-13 14:50:01 UTC

Description:

   * Fix CVE-2026-58050 (publickey.c attribute-count multiplication
     overflow), CVE-2026-58051 (publickey.c arbitrary free via
     uninitialised list entry)
   * Fix double-free of receive_packet in the publickey subsystem
     (no CVE, upstream 86301ab5 / #1699)

CVEs fixed:

CVE-2025-15661
CVE-2026-55199
CVE-2026-55200
CVE-2026-58050
CVE-2026-58051
CVE-2026-7598

Updated packages:

alt-libssh2_1.11.1-1.7_amd64.deb
sha:7865470f8645447002035c947b2f7e86f00cc1b5
alt-libssh2-dev_1.11.1-1.7_amd64.deb
sha:f564e53417b6cdb03e855204284e4bb55d3facd6
alt-libssh2_1.11.1-1.7_arm64.deb
sha:664b984452ea5f2f4de1412b4eb9dc17b4c60a52
alt-libssh2-dev_1.11.1-1.7_arm64.deb
sha:531d079929d35a2126426216aecaa4043d1a8081

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.