fix(cve): CVE-2026-59844 - sftpserver: Check SSH_FXP_READ length to prevent DoS - #9

Merged

Zeno-sole merged 10 commits into

fix-cve/CVE-2026-59844

Jul 27, 2026

Commits on Jul 27, 2026

fix(cve): CVE-2026-59844 - sftpserver: Check SSH_FXP_READ length to prevent DoS

deepin-ci-robot
and
hudeng-go
committed
fix(cve): CVE-2026-59847 - CVE-2026-59847 libcrypto: Fix symmetric issue during encryption

deepin-ci-robot
and
hudeng-go
committed
fix(cve): CVE-2026-59848 - CVE-2026-59848 sftp: handle responses with unknown request IDs

deepin-ci-robot
and
hudeng-go
committed
fix(cve): CVE-2026-15370 - fix: replace str(n)(cat|cpy) with strl(cat|cpy)

deepin-ci-robot
and
hudeng-go
committed
fix(cve): CVE-2026-59845 - CVE-2026-59845 socket: Properly check fork() return code

deepin-ci-robot
and
hudeng-go
committed
fix(cve): CVE-2026-59850 - CVE-2026-59850 channels: Avoid processing DATA packets on closed channel

deepin-ci-robot
and
hudeng-go
committed
fix(cve): CVE-2026-59849 - CVE-2026-59849 auth: Fix state machine to aovid infinite loop

deepin-ci-robot
and
hudeng-go
committed
fix(cve): CVE-2026-59846 - CVE-2026-59846 Block shell metacharacters from usernames

deepin-ci-robot
and
hudeng-go
committed
fix(CVE-2026-59848): update remaining sftp_get_new_id calls in sftp_read/sftp_async_read_begin
hudeng-go
committed
fix(CVE-2026-59848): return NULL instead of -1 in sftp_fstatvfs (pointer return type)
hudeng-go
committed