Release date:
2026-08-04 09:53:28 UTC
Description:
* SECURITY UPDATE: use-after-free in channel_rcv_data() when a peer sends
DATA on a channel it has already closed
- debian/patches/CVE-2026-59850.patch: reject DATA packets on channels
already closed by the remote peer (SSH_CHANNEL_FLAG_CLOSED_REMOTE) in
channel_rcv_data(), and additionally drop the callback list in
ssh_channel_free() so DATA arriving between a local free and the
peer's CLOSE can no longer dispatch callbacks on a released channel,
both in src/channels.c
- CVE-2026-59850
Updated packages:
-
libssh-4_0.9.3-2ubuntu2.5+tuxcare.els7_amd64.deb
sha:8f9ea1807cfdc874a91065fb66e4d13655c4f3eb
-
libssh-dev_0.9.3-2ubuntu2.5+tuxcare.els7_amd64.deb
sha:9a52274f04de9f8b27d42c34a9435406bc5031f0
-
libssh-doc_0.9.3-2ubuntu2.5+tuxcare.els7_all.deb
sha:92e39ab1c10e61877d3cfd998119e7ca355c6a68
-
libssh-gcrypt-4_0.9.3-2ubuntu2.5+tuxcare.els7_amd64.deb
sha:232007018ea0725e173231424cb2ebf67864ba1a
-
libssh-gcrypt-dev_0.9.3-2ubuntu2.5+tuxcare.els7_amd64.deb
sha:6bf4b20574a716635795f031111ef137b460ebd2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
