已关闭
fix CVE-2026-59850 #154
lizhipeng创建于 7月22日关闭于 7 小时前
fix CVE-2026-59850 #154
已关闭
共 2 个文件变更+26-1
| @@ -0,0 +1,18 @@ | |||
| 1 | +diff --git a/src/channels.c b/src/channels.c | ||
| 2 | +index c8a5d8b..60eb27c 100644 | ||
| 3 | +--- a/src/channels.c | ||
| 4 | ++++ b/src/channels.c | ||
| 5 | + SSH_PACKET_CALLBACK(channel_rcv_data) | ||
| 6 | + channel->local_window, | ||
| 7 | + channel->remote_window); | ||
| 8 | + | ||
| 9 | ++ if (channel->flags & SSH_CHANNEL_FLAG_CLOSED_REMOTE) { | ||
| 10 | ++ SSH_LOG(SSH_LOG_WARNING, "Received data on (remotely) closed channel"); | ||
| 11 | ++ ssh_set_error(session, SSH_FATAL, "Received data on (remotely) closed channel"); | ||
| 12 | ++ SSH_STRING_FREE(str); | ||
| 13 | ++ return SSH_PACKET_USED; | ||
| 14 | ++ } | ||
| 15 | ++ | ||
| 16 | + if (len > channel->local_window) { | ||
| 17 | + SSH_LOG(SSH_LOG_RARE, | ||
| 18 | + "Data packet too big for our window(%" PRIu32 " vs %" PRIu32 ")", | ||
| @@ -1,6 +1,6 @@ | |||
| 1 | Name: libssh | 1 | Name: libssh |
| 2 | Version: 0.11.3 | 2 | Version: 0.11.3 |
| 3 | -Release: 3 | 3 | +Release: 4 |
| 4 | Summary: A library implementing the SSH protocol | 4 | Summary: A library implementing the SSH protocol |
| 5 | License: LGPL-2.1-or-later | 5 | License: LGPL-2.1-or-later |
| 6 | URL: https://www.libssh.org | 6 | URL: https://www.libssh.org |
| @@ -16,6 +16,7 @@ Patch6: backport-CVE-2026-0965-do-not-attempt-to-read-non-regular-conf-f | |||
| 16 | Patch7: backport-CVE-2026-0964-Reject-invalid-paths-received-through-scp.patch | 16 | Patch7: backport-CVE-2026-0964-Reject-invalid-paths-received-through-scp.patch |
| 17 | Patch8: backport-CVE-2025-14821-Fix-global-config-location-on-Windows.patch | 17 | Patch8: backport-CVE-2025-14821-Fix-global-config-location-on-Windows.patch |
| 18 | Patch9: backport-CVE-2026-3731-Fix-out-of-bound-read-from-sftp-extentions.patch | 18 | Patch9: backport-CVE-2026-3731-Fix-out-of-bound-read-from-sftp-extentions.patch |
| 19 | +Patch10: backport-CVE-2026-59850.patch | ||
| 19 | 20 | ||
| 20 | BuildRequires: cmake gcc-c++ gnupg2 openssl-devel pkgconfig zlib-devel | 21 | BuildRequires: cmake gcc-c++ gnupg2 openssl-devel pkgconfig zlib-devel |
| 21 | BuildRequires: krb5-devel libcmocka-devel openssh-clients openssh-server | 22 | BuildRequires: krb5-devel libcmocka-devel openssh-clients openssh-server |
| @@ -86,6 +87,12 @@ popd | |||
| 86 | %doc CHANGELOG README | 87 | %doc CHANGELOG README |
| 87 | 88 | ||
| 88 | %changelog | 89 | %changelog |
| 90 | +* Wed Jul 22 2026 lizhipeng <lizhipeng@kylonos.cn> - 0.11.3-4 | ||
| 91 | +- Type:CVE | ||
| 92 | +- Id:CVE-2026-59850 | ||
| 93 | +- SUG:NA | ||
| 94 | +- DESC:fix CVE-2026-59850 | ||
| 95 | + | ||
| 89 | * Wed Mar 11 2026 zhangbinqin <zhangbinqin@h-partners.com> - 0.11.3-3 | 96 | * Wed Mar 11 2026 zhangbinqin <zhangbinqin@h-partners.com> - 0.11.3-3 |
| 90 | - Type:CVE | 97 | - Type:CVE |
| 91 | - Id:CVE-2026-3731 | 98 | - Id:CVE-2026-3731 |