CLSA-2026:1791917184

[CLSA-2026:1791917184] alt-libssh211: Fix of 6 CVEs

Type:

security

Severity:

Critical

Release date:

2026-10-13 18:46:38 UTC

Description:

- Fix CVE-2026-58050 (publickey.c attribute-count multiplication overflow),
  CVE-2026-58051 (publickey.c arbitrary free via uninitialised list entry)
- Fix double-free of receive_packet in the publickey subsystem (no CVE,
  upstream 86301ab5 / #1699)

CVEs fixed:

CVE-2025-15661
CVE-2026-55199
CVE-2026-55200
CVE-2026-58050
CVE-2026-58051
CVE-2026-7598

Updated packages:

alt-libssh211-1.11.1-6.el9.x86_64.rpm
sha:43f3f15324eda07faba4aabc7e47d47ace1fda092c84fd288f4ac1a282bd3ef8
alt-libssh211-devel-1.11.1-6.el9.x86_64.rpm
sha:cdf795e9a06ffc78e8852ded222d032ad1e840c2544865cfb87e39131867d5ae
alt-libssh211-docs-1.11.1-6.el9.x86_64.rpm
sha:984b771a27f37819b2c75dd03b04e6c0332b094bd3ef0cdf02af93045204389f

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.