Release date:
2026-10-13 15:21:36 UTC
Description:
* Fix CVE-2026-58050 (publickey.c attribute-count multiplication
overflow), CVE-2026-58051 (publickey.c arbitrary free via
uninitialised list entry)
* Fix double-free of receive_packet in the publickey subsystem
(no CVE, upstream 86301ab5 / #1699)
Updated packages:
-
alt-libssh2_1.11.1-1.7_amd64.deb
sha:2e49ab89079abaf488610ab753279f32fd5aa3eb
-
alt-libssh2-dev_1.11.1-1.7_amd64.deb
sha:68c1cc7d8ecfcae5b91ab2d5e28732ca5bfe0564
-
alt-libssh2_1.11.1-1.7_arm64.deb
sha:8a68087e821541dcf656586919aebfafdfa7e7c4
-
alt-libssh2-dev_1.11.1-1.7_arm64.deb
sha:b14727ca2becdf03b396a2bd0507b8ef7d45c24c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.