lp://staging/ubuntu/trusty-security/libssh

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

25. By Marc Deslauriers on 2015-01-07

* SECURITY UPDATE: denial of service via crafted kexinit packet
  - debian/patches/CVE-2014-8132.patch: properly set slots to NULL in
    src/kex.c.
  - CVE-2014-8132

24. By Marc Deslauriers on 2014-03-10

* SECURITY UPDATE: PRNG state reuse on forking servers
  - debian/patches/CVE-2014-0017.patch: force reseed after fork in
    include/libssh/wrapper.h, src/bind.c, src/libcrypto.c,
    src/libgcrypt.c.
  - CVE-2014-0017

23. By Jonathan Riddell on 2014-02-13

Fix .symbols file

22. By Scarlett Gately Moore on 2014-02-12

New upstream release.

21. By Laurent Bigonville on 2013-02-05

* New upstream security release
  - Fix NULL dereference leads to denial of service
    (Closes: #698963, CVE-2013-0176)
* debian/patches/0003-fix-typo.patch: Fix typo in error message

20. By Marc Deslauriers on 2013-01-25

* SECURITY UPDATE: denial of service via NULL dereference
  - debian/patches/CVE-2013-0176.patch: properly handle client that
    doesn't send a matching key in src/server.c.
  - CVE-2013-0176

19. By Laurent Bigonville on 2012-11-21

* New upstream security release
  - Fixes CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562
  - Fix regression in pre-connected socket setting (Closes: #688700)

18. By Laurent Bigonville on 2011-09-19

* New upstream release
  - Fix bug with ssh_channel_write (Closes: #631950)
* debian/watch: Use new tarball location

17. By Laurent Bigonville on 2011-08-19

* New upstream release (Closes: #637445)
* debian/patches/0001-rename-threads-static.patch,
  debian/patches/0002-Check-for-NULL-pointers-in-string-c.patch: Dropped
* debian/rules:
  - Adjust rule that build documentation
* debian/patches/0001-disable-latex-documentation.patch: Disable LaTeX
  documentation generation (Closes: #622108)
* debian/control: Drop texlive-fonts-recommended build-dependency
* debian/patches/0002-fix-html-doc-generation.patch: Fix HTML doc generation
  (LP: #821437)
* debian/libssh-doc.doc-base: Refine Title and Files glob

16. By Laurent Bigonville on 2011-06-15

* debian/patches/0002-Check-for-NULL-pointers-in-string-c.patch:
  Consolidate patch (Should fix previous REJECT)
* Support multiarch spec