CLSA-2026:1791916954

[CLSA-2026:1791916954] alt-libssh211: Fix of 6 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-13 18:42:48 UTC

Description:

- Fix CVE-2026-58050 (publickey.c attribute-count multiplication overflow),
  CVE-2026-58051 (publickey.c arbitrary free via uninitialised list entry)
- Fix double-free of receive_packet in the publickey subsystem (no CVE,
  upstream 86301ab5 / #1699)

CVEs fixed:

CVE-2025-15661
CVE-2026-55199
CVE-2026-55200
CVE-2026-58050
CVE-2026-58051
CVE-2026-7598

Updated packages:

alt-libssh211-1.11.1-6.el7.x86_64.rpm
sha:7477686c939eada90f2a015844f3fe5087d630ac8e1b5eda582b0de3a58f6e12
alt-libssh211-devel-1.11.1-6.el7.x86_64.rpm
sha:4195cf4b73113f5afe3384c07d940d3c0af099b5ba14f431fe3c5ccdf8894c59
alt-libssh211-docs-1.11.1-6.el7.x86_64.rpm
sha:67c3e1c7e31faf5083772084a95ce5ee6785ba6e5da8d934caa3af1a0f674e78

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.