[CLSA-2026:1791904881] Fix of 6 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-13 15:21:36 UTC
Description:
* Fix CVE-2026-58050 (publickey.c attribute-count multiplication overflow), CVE-2026-58051 (publickey.c arbitrary free via uninitialised list entry) * Fix double-free of receive_packet in the publickey subsystem (no CVE, upstream 86301ab5 / #1699)
Updated packages:
  • alt-libssh2_1.11.1-1.7_amd64.deb
    sha:2e49ab89079abaf488610ab753279f32fd5aa3eb
  • alt-libssh2-dev_1.11.1-1.7_amd64.deb
    sha:68c1cc7d8ecfcae5b91ab2d5e28732ca5bfe0564
  • alt-libssh2_1.11.1-1.7_arm64.deb
    sha:8a68087e821541dcf656586919aebfafdfa7e7c4
  • alt-libssh2-dev_1.11.1-1.7_arm64.deb
    sha:b14727ca2becdf03b396a2bd0507b8ef7d45c24c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.