[CLSA-2026:1784070060] Fix CVE(s): CVE-2026-58050
Type:
security
Severity:
Important
Release date:
2026-07-14 23:01:13 UTC
Description:
* SECURITY UPDATE: potential multiplication overflow in the publickey subsystem leading to a heap buffer overflow on 32-bit platforms - debian/patches/CVE-2026-58050.patch: cap the publickey attribute count at 1024, and zero-initialise the freshly (re)allocated list entry before parsing to avoid a free of uninitialised memory on the new bounds-check error path, in libssh2_publickey_list_fetch() in src/publickey.c - CVE-2026-58050
CVEs fixed:
Updated packages:
  • libssh2-1_1.8.0-2.1ubuntu0.1+tuxcare.els2_amd64.deb
    sha:c90c1c216860c66834725c4dd0a5fd19accbdc21
  • libssh2-1-dev_1.8.0-2.1ubuntu0.1+tuxcare.els2_amd64.deb
    sha:532e581d1ff9afb63eca39e75f0348abd90d8f54
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.