Пакет libssh2: Информация

  • Default inline alert: Версия в репозитории: 1.11.0-alt2

Исходный пакет: libssh2
Версия: 1.8.1-alt1
Собран:  24 марта 2019 г. 2:41 в задании #225575
Сообщить об ошибке в пакете
Домашняя страница: http://www.libssh2.org/

Лицензия: BSD
О пакете: A library implementing the SSH2 protocol
Описание: 
libssh2 is a library implementing the SSH2 protocol as defined by
Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25),
SECSH-CONNECTION(23), SECSH-ARCH(20), SECSH-FILEXFER(06)*,
SECSH-DHGEX(04), and SECSH-NUMBERS(10).

Список rpm-пакетов, предоставляемых данным srpm-пакетом:
libssh2 (x86_64, i586, aarch64)
libssh2-debuginfo (x86_64, i586, aarch64)
libssh2-devel (x86_64, i586, aarch64)
libssh2-docs (noarch)

Сопровождающий: Alexey Shabalin


    1. man
    2. zlib-devel
    3. openssl-devel

Последнее изменение


24 марта 2019 г. Alexey Shabalin 1.8.1-alt1
- 1.8.1
- Fixes for the following security vulnerabilities:
  + Fixed possible integer overflow when reading a specially crafted packet
    (CVE-2019-3855)
  + Fixed possible integer overflow in userauth_keyboard_interactive with a
    number of extremely long prompt strings (CVE-2019-3863)
  + Fixed possible integer overflow if the server sent an extremely large
    number of keyboard prompts (CVE-2019-3856)
  + Fixed possible out of bounds read when processing a specially crafted
    packet (CVE-2019-3861)
  + Fixed possible integer overflow when receiving a specially crafted exit
    signal message channel packet (CVE-2019-3857)
  + Fixed possible out of bounds read when receiving a specially crafted exit
    status message channel packet (CVE-2019-3862)
  + Fixed possible zero byte allocation when reading a specially crafted SFTP
    packet (CVE-2019-3858)
  + Fixed possible out of bounds reads when processing specially crafted SFTP
    packets (CVE-2019-3860)
  + Fixed possible out of bounds reads in _libssh2_packet_require(v)
    (CVE-2019-3859)
31 августа 2018 г. Alexey Shabalin 1.8.0-alt1
- 1.8.0
- build with openssl-1.1
25 ноября 2015 г. Anton V. Boyarshinov 1.4.3-alt2