USN-8722-1:libssh2 漏洞

Ubuntu 发布安全公告 USN-8722-1,涉及 libssh2 漏洞。公告日期为 2026-09-03,原始地址为 https://ubuntu.com/security/notices/USN-8722-1。

修复的软件包版本

  • Ubuntu 26.04 LTS(resolute):libssh2-1t64 更新至 1.11.1-1ubuntu0.26.04.4
  • Ubuntu 24.04 LTS(noble):libssh2-1t64 更新至 1.11.0-4.1ubuntu0.24.04.4

两处修复均以 standard update 方式提供。

相关 CVE

  • CVE-2026-66032
  • CVE-2026-66033
  • CVE-2026-66035

原始字段标识

{ "project": "ubuntu", "event": "security", "identifier": "USN-8722-1", "version": null, "announcementDate": "2026-09-03 12:37:05+00", "officialSource": "https://ubuntu.com/security/notices/USN-8722-1", "cves": [ "CVE-2026-66032", "CVE-2026-66033", "CVE-2026-66035" ], "fixedPackages": [ "release": "26.04 LTS resolute", "package": "libssh2-1t64", "version": "1.11.1-1ubuntu0.26.04.4", "access": "standard update" }, "release": "24.04 LTS noble", "version": "1.11.0-4.1ubuntu0.24.04.4", } "editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."