Release date:
2026-10-14 12:16:36 UTC
Description:
- Fix CVE-2026-66032 (sftp_open double-free of the status buffer),
CVE-2026-66033 (AES-GCM length underflow in _libssh2_cipher_crypt),
CVE-2026-66034 (publickey.c comment_len OOB read),
CVE-2026-66035 (ETM heap overflow in fullpacket)
- Fix length underflow on short chacha20-poly1305 packets
(no CVE, GHSA-x4g5-mgfc-cxvv, upstream 15257c08 / #2389)
Updated packages:
-
alt-libssh211-1.11.1-7.el9.x86_64.rpm
sha:c2e49e4e33ef896b117154adfe9e883183d66ab8d5bec86a9ee4464abea2d72c
-
alt-libssh211-devel-1.11.1-7.el9.x86_64.rpm
sha:e058ca1bb321335bf5bc77f8026a18ebc9c5f39593771b1895865d2d6ab0d66f
-
alt-libssh211-docs-1.11.1-7.el9.x86_64.rpm
sha:3400b85bb8850fd53f5d796f963fc37117486e23cc33002e04279aa8badb56b1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
