CLSA-2026:1791917724

[CLSA-2026:1791917724] alt-libssh211: Fix of 6 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-13 18:55:38 UTC

Description:

- Fix CVE-2026-58050 (publickey.c attribute-count multiplication overflow),
  CVE-2026-58051 (publickey.c arbitrary free via uninitialised list entry)
- Fix double-free of receive_packet in the publickey subsystem (no CVE,
  upstream 86301ab5 / #1699)

CVEs fixed:

CVE-2025-15661
CVE-2026-55199
CVE-2026-55200
CVE-2026-58050
CVE-2026-58051
CVE-2026-7598

Updated packages:

alt-libssh211-1.11.1-6.el6.x86_64.rpm
sha:1942465d30a5a728ea573ff059bbd44fcf9265c23d84d638164e19d9e7f92b1b
alt-libssh211-devel-1.11.1-6.el6.x86_64.rpm
sha:0dd2737e6ffd03530c31af8828977d47848ac1cadf016c5a75a3103a851409a8
alt-libssh211-docs-1.11.1-6.el6.x86_64.rpm
sha:2a7171b2775e860b5ee4ab6d5a4e0edf7140821e5ff7b85b9e2223ce1936d926

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.