Release date:
2026-11-09 14:53:04 UTC
Description:
- CVE-2025-15661: sftp_symlink() parses the SSH_FXP_NAME reply to
READLINK/REALPATH through a bounds-checked string_buf, so a malicious
server can no longer make it copy link_len bytes past the packet data
Updated packages:
-
libssh2-1.4.3-12.amzn2.2.9.tuxcare.els2.i686.rpm
sha:7e24d8aa1385a3d234a27718b51130204a7e61e5975d39a9ef7b869d79812cdb
-
libssh2-1.4.3-12.amzn2.2.9.tuxcare.els2.x86_64.rpm
sha:6285e4408a115401d0b4550dfbbd370b67cd859d31507986feca1795f5caa48e
-
libssh2-devel-1.4.3-12.amzn2.2.9.tuxcare.els2.i686.rpm
sha:91374af9833a69a278f5708ae89410c1a456f9e8e9ceebe1a4121612ddbf4a94
-
libssh2-devel-1.4.3-12.amzn2.2.9.tuxcare.els2.x86_64.rpm
sha:29b548d53073f2342f0649ee3a2f0c8c2ea3f0d85f18d7f5146d78ecf65942bd
-
libssh2-docs-1.4.3-12.amzn2.2.9.tuxcare.els2.noarch.rpm
sha:9f6825e04a27ea71dbd3e8c06a1567c5718e206828f65bb7568042b7d89c0751
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
