good morning,
our security team informed us about a security vulnerability fix in libssh2
Description
libssh2 is a C library for providing SSH2 services on both the client and server sides. It can be used to run programs remotely, transfer files, or as a secure and transparent tunnel for remote programs.
CVE-2026-66034
A vulnerability exists in libssh2. A missing scope check in the public key subsystem allows a malicious SSH server to initiate an out-of-scope read request and release an uninitialized pointer.
A remote, anonymous attacker could exploit this vulnerability to potentially disclose sensitive information, cause a denial-of-service condition, or execute arbitrary code. Successful exploitation requires user action.
CVE-2026-66035
There is a vulnerability in libssh2. A heap buffer overflow in the `fullpacket()` function allows a malicious SSH server to corrupt the heap memory by sending a packet whose length is smaller than the negotiated Encrypt-then-MAC (ETM) cipher block size. A remote, anonymous attacker can exploit this vulnerability to potentially cause a denial-of-service condition or execute arbitrary code. Successful exploitation requires user action.
Please provide the appropriate patches.
------------------------------
Stefan Martin
------------------------------