Release date:
2026-10-14 12:01:56 UTC
Description:
- Fix CVE-2026-66032 (sftp_open double-free of the status buffer),
CVE-2026-66033 (AES-GCM length underflow in _libssh2_cipher_crypt),
CVE-2026-66034 (publickey.c comment_len OOB read),
CVE-2026-66035 (ETM heap overflow in fullpacket)
- Fix length underflow on short chacha20-poly1305 packets
(no CVE, GHSA-x4g5-mgfc-cxvv, upstream 15257c08 / #2389)
Updated packages:
-
alt-libssh211-1.11.1-7.el6.x86_64.rpm
sha:f684ebf454ff238fa4a8931a7cc0e4d3c5a044f4281ea5984a8426ac86c6aece
-
alt-libssh211-devel-1.11.1-7.el6.x86_64.rpm
sha:8287fb34b5c5e2c9017588ff80ab7befb99ca0f12439e957987f714aa430feab
-
alt-libssh211-docs-1.11.1-7.el6.x86_64.rpm
sha:17d059db567399e843550c7975641b728636eb4ab8ee1c18b558138ef9d7bc76
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
