[pull] master from buildroot:master#1072
Merged
Merged
Conversation
Fixes the following vulnerability: - CVE-2026-55199: libssh2 through 1.11.1, fixed in commit 1762685, contains a pre- authentication denial of service vulnerability in the SSH_MSG_EXT_INFO handler in src/packet.c that allows a malicious SSH server to cause a client CPU exhaustion loop by sending a crafted extension count value. A malicious server can set nr_extensions to 0xFFFFFFFF during key exchange, causing the client to spin in a tight CPU loop for over 60 seconds because return values from _libssh2_get_string() are unchecked and the session timeout does not apply to CPU-bound loops. For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-55199 - libssh2/libssh2@1762685 Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
- CVE-2026-55200: libssh2 through 1.11.1, fixed in commit 97acf3df contains an out-of- bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution. For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-55200 - libssh2/libssh2@97acf3d Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )