[CLSA-2026:1787393556] libssh2: Fix of CVE-2026-66032
Type:
security
Severity:
Important
Release date:
2026-08-22 10:12:46 UTC
Description:
- CVE-2026-66032: nullify data after free in sftp_open() to prevent a double-free when sftp_packet_require() fails on the FXP_STATUS/FX_OK path
CVEs fixed:
Updated packages:
  • libssh2-1.4.2-3.0.1.el6_10.1.tuxcare.ol.els7.i686.rpm
    sha:761b26dd1cd70f0cd02ed0d6c40eb90b0507b0c860d8f0a8d8697d2e616659fd
  • libssh2-1.4.2-3.0.1.el6_10.1.tuxcare.ol.els7.x86_64.rpm
    sha:cdb56321a1999981506a9e12a806bc95967dfb85dfdbcac27e196d3bf7d79c9b
  • libssh2-devel-1.4.2-3.0.1.el6_10.1.tuxcare.ol.els7.i686.rpm
    sha:d737649b162f964b575188bbb0b5547786b0b2e06a5377cf7d6e2ab94cb559f4
  • libssh2-devel-1.4.2-3.0.1.el6_10.1.tuxcare.ol.els7.x86_64.rpm
    sha:3d28d89aee3a90a0f341ab0adfb7796bd89e02b19f5b92143afc1ceefb601f49
  • libssh2-docs-1.4.2-3.0.1.el6_10.1.tuxcare.ol.els7.x86_64.rpm
    sha:aa16933cabe0c4b948883d32711f40fef9a95084258bb1479d24d27c06ea8263
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.