Release date:
2026-10-14 12:05:57 UTC
Description:
- Fix CVE-2026-66032 (sftp_open double-free of the status buffer),
CVE-2026-66033 (AES-GCM length underflow in _libssh2_cipher_crypt),
CVE-2026-66034 (publickey.c comment_len OOB read),
CVE-2026-66035 (ETM heap overflow in fullpacket)
- Fix length underflow on short chacha20-poly1305 packets
(no CVE, GHSA-x4g5-mgfc-cxvv, upstream 15257c08 / #2389)
Updated packages:
-
alt-libssh211-1.11.1-7.el7.x86_64.rpm
sha:b948e1fc2bc36f7357941faffac92280c3e19066f911c3287a0370061f7b7fcd
-
alt-libssh211-devel-1.11.1-7.el7.x86_64.rpm
sha:7612b70a25f946f4e1152444e4c7cd2b493eab10be1c1929f5a8b9751d5db0da
-
alt-libssh211-docs-1.11.1-7.el7.x86_64.rpm
sha:0790dccc7f4fe67adb45f2a29729f07b49b7e702cebf38ea4ddbffb9dbc7652d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
