[CLSA-2026:1787063936] libssh2: Fix of CVE-2026-66032
Type:
security
Severity:
Important
Release date:
2026-08-18 20:52:36 UTC
Description:
- CVE-2026-66032: nullify data after free in sftp_open() to prevent a double-free when sftp_packet_require() fails on the FXP_STATUS/FX_OK path
CVEs fixed:
Updated packages:
  • libssh2-1.4.2-3.0.1.el6_10.1.tuxcare.els7.i686.rpm
    sha:b6752efba59ae279e9bbd8f7e5f93a737377158fbf9fe6c9614207c61a72caa9
  • libssh2-1.4.2-3.0.1.el6_10.1.tuxcare.els7.x86_64.rpm
    sha:8f1bafb75ae956c4573f237c68a471146e305c6d2f305990a432657de784bb01
  • libssh2-devel-1.4.2-3.0.1.el6_10.1.tuxcare.els7.i686.rpm
    sha:e7bcff268206aac10fa8e2579637233b2df488aaead82c8b193faf28dacaaa53
  • libssh2-devel-1.4.2-3.0.1.el6_10.1.tuxcare.els7.x86_64.rpm
    sha:651158d658584315e0a37117575aa957b619630ef71539271faeeae2f369dc13
  • libssh2-docs-1.4.2-3.0.1.el6_10.1.tuxcare.els7.x86_64.rpm
    sha:31ffbc4846e757a182cca4959520900f5d59039e09c970b22e690fc6b62bda64
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.