CLSA-2026:1791917434

[CLSA-2026:1791917434] alt-libssh211: Fix of 6 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-13 18:50:47 UTC

Description:

- Fix CVE-2026-58050 (publickey.c attribute-count multiplication overflow),
  CVE-2026-58051 (publickey.c arbitrary free via uninitialised list entry)
- Fix double-free of receive_packet in the publickey subsystem (no CVE,
  upstream 86301ab5 / #1699)

CVEs fixed:

CVE-2025-15661
CVE-2026-55199
CVE-2026-55200
CVE-2026-58050
CVE-2026-58051
CVE-2026-7598

Updated packages:

alt-libssh211-1.11.1-6.el8.x86_64.rpm
sha:b85e0ae05436357e39a9f6d2211981a141e05a3234a7dfa49f922ee71fcc7fcc
alt-libssh211-devel-1.11.1-6.el8.x86_64.rpm
sha:1b9784f0299bbc3883c856ed9b7d10e1e0918af9c31c74a1e51df0e2d64b660e
alt-libssh211-docs-1.11.1-6.el8.x86_64.rpm
sha:644f41320cffde65b5a3f3acf9307f6b021c3ff6c55dfdaf1b8a16b776ebe4e3

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.