Thomas Perale c5aa932745 package/libssh2: backport upstream patch for CVE-2026-55200 ...

- CVE-2026-55200:
    libssh2 through 1.11.1, fixed in commit 97acf3df contains an out-of-
    bounds write vulnerability in ssh2_transport_read() that fails to
    enforce upper bounds on packet_length field. Remote attackers can send
    crafted SSH packets with excessively large packet_length values to
    corrupt heap memory and achieve remote code execution.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2026-55200
  - 97acf3dfda

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>

2026-06-30 21:58:47 +02:00

..

0001-username-len-bound-checking.patch

…

0002-packet-check-libssh2-get-string-return-in-EXT-INFO-handler.patch

…

0003-transport-c-Additional-boundary-checks-for-packet-length.patch

…

Config.in

…

libssh2.hash

…

libssh2.mk

…