Ubuntu
libssh package

libssh 0.9.3-2ubuntu2.2 source package in Ubuntu

Changelog

libssh (0.9.3-2ubuntu2.2) focal-security; urgency=medium

  * SECURITY UPDATE: possible heap-buffer overflow when rekeying
    - debian/patches/CVE-2021-3634.patch: create a separate length for
      session_id in include/libssh/crypto.h, src/gssapi.c, src/kdf.c,
      src/kex.c, src/libcrypto.c, src/messages.c, src/packet.c, src/pki.c,
      src/wrapper.c, tests/unittests/torture_session_keys.c.
    - CVE-2021-3634

 -- Marc Deslauriers <email address hidden>  Wed, 18 Aug 2021 11:35:51 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libssh_0.9.3.orig.tar.xz 488.3 KiB 2c8b5f894dced58b3d629f16f3afa6562c20b4bdc894639163cf657833688f0c
libssh_0.9.3-2ubuntu2.2.debian.tar.xz 29.5 KiB e6b12c1efb31ad4d6182ce64df210e29fb73f8fe606ce099d3eb2c247190c061
libssh_0.9.3-2ubuntu2.2.dsc 2.5 KiB 3400ff90c01a7db170c0c3855f243a9605b07d2bc72fa0b9e88e431d626348a4

View changes file

Binary packages built by this source

libssh-4: tiny C SSH library (OpenSSL flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains shared libraries linked against OpenSSL.

libssh-4-dbgsym: debug symbols for libssh-4
libssh-dev: tiny C SSH library - Development files (OpenSSL flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains development files to build the OpenSSL flavor.

libssh-doc: tiny C SSH library - Documentation files

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains documentation files.

libssh-gcrypt-4: tiny C SSH library (gcrypt flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains shared libraries linked against gcrypt.

libssh-gcrypt-4-dbgsym: debug symbols for libssh-gcrypt-4
libssh-gcrypt-dev: tiny C SSH library - Development files (gcrypt flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains development files to build the gcrypt flavor.