[ubuntu/resolute-security] libssh2 1.11.1-1ubuntu0.26.04.2 (Accepted)

[Marc Deslauriers]

libssh2 (1.11.1-1ubuntu0.26.04.2) resolute-security; urgency=medium

  * SECURITY UPDATE: OOB read in sftp_symlink()
    - debian/patches/CVE-2025-15661-pre1.patch: add LIBSSH2_UNCONST() in
      src/libssh2_priv.h.
    - debian/patches/CVE-2025-15661.patch: Update sftp_symlink to avoid out of
      bounds read on malformed packet in src/sftp.c.
    - CVE-2025-15661
  * SECURITY UPDATE: pre-authentication denial of service via CPU loop
    - debian/patches/CVE-2026-55199.patch: packet: check `_libssh2_get_string()`
      return in `EXT_INFO` handler in src/packet.c.
    - CVE-2026-55199
  * SECURITY UPDATE: code exec via OOB write in ssh2_transport_read()
    - debian/patches/CVE-2026-55200.patch: transport.c: Additional boundary
      checks for packet length in src/transport.c.
    - CVE-2026-55200

Date: 2026-06-29 13:49:12.350552+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libssh2/1.11.1-1ubuntu0.26.04.2
-------------- next part --------------
Sorry, changesfile not available.