Release date:
2026-10-14 12:31:16 UTC
Description:
- Fix CVE-2026-66032 (sftp_open double-free of the status buffer),
CVE-2026-66033 (AES-GCM length underflow in _libssh2_cipher_crypt),
CVE-2026-66034 (publickey.c comment_len OOB read),
CVE-2026-66035 (ETM heap overflow in fullpacket)
- Fix length underflow on short chacha20-poly1305 packets
(no CVE, GHSA-x4g5-mgfc-cxvv, upstream 15257c08 / #2389)
Updated packages:
-
alt-libssh211-1.11.1-7.el8.x86_64.rpm
sha:0e874135df1085b3cc6f5b8aec0cfcfeef53cbbb436966c18e192c14369b0442
-
alt-libssh211-devel-1.11.1-7.el8.x86_64.rpm
sha:b99141300077a81f086c6e2c6f89c711b1957e50c212f9cfab03bc917babeca8
-
alt-libssh211-docs-1.11.1-7.el8.x86_64.rpm
sha:0671285544f85815d9a6e1d36620832933e1f36297c509fe2b790afcb953ded4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
