Release date:
2026-10-14 11:45:10 UTC
Description:
- Fix CVE-2026-66032 (sftp_open double-free of the status buffer),
CVE-2026-66033 (AES-GCM length underflow in _libssh2_cipher_crypt),
CVE-2026-66034 (publickey.c comment_len OOB read),
CVE-2026-66035 (ETM heap overflow in fullpacket)
- Fix length underflow on short chacha20-poly1305 packets
(no CVE, GHSA-x4g5-mgfc-cxvv, upstream 15257c08 / #2389)
Updated packages:
-
alt-libssh211-1.11.1-7.el10.x86_64.rpm
sha:911ea25983bde0a8937bf042f7f8e008eb2b72a65594e5d6f724cee06f3c1abb
-
alt-libssh211-devel-1.11.1-7.el10.x86_64.rpm
sha:1689034f036480382e6ca303bc5b21126dc44381c79eb6f8bb5ebf6fadfde885
-
alt-libssh211-docs-1.11.1-7.el10.x86_64.rpm
sha:af855d44c7312b49481c0e52033151b95634056aaecc2bb0c2a3b264b2b6bc9a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
