Accepted libssh 0.7.3-2+deb9u3 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 01 Aug 2020 00:28:18 +0200
Source: libssh
Binary: libssh-4 libssh-gcrypt-4 libssh-dev libssh-gcrypt-dev libssh-doc
Architecture: source amd64 all
Version: 0.7.3-2+deb9u3
Distribution: stretch-security
Urgency: high
Maintainer: Laurent Bigonville <bigon@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libssh-4 - tiny C SSH library (OpenSSL flavor)
libssh-dev - tiny C SSH library. Development files (OpenSSL flavor)
libssh-doc - tiny C SSH library. Documentation files
libssh-gcrypt-4 - tiny C SSH library (gcrypt flavor)
libssh-gcrypt-dev - tiny C SSH library. Development files (gcrypt flavor)
Changes:
libssh (0.7.3-2+deb9u3) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2020-16135:
The code in src/sftpserver.c did not verify the validity of certain
pointers and expected them to be valid. A NULL pointer dereference could
have been occured that typically causes a crash and thus a
denial-of-service.
Checksums-Sha1:
36eae0364f2410f049bdb2ae04d82c064832a6db 2459 libssh_0.7.3-2+deb9u3.dsc
74bbb21fd07a98b9bffee1c052b503d566959e4b 25964 libssh_0.7.3-2+deb9u3.debian.tar.xz
5f72f74566a027e98038efbc0bd68ba9e58d7f3a 470388 libssh-4-dbgsym_0.7.3-2+deb9u3_amd64.deb
e3b403532549e5f80b6b1c2465dada7777ef0d8d 171166 libssh-4_0.7.3-2+deb9u3_amd64.deb
186d953576d13465af93407799a847d5ee33eaf5 213854 libssh-dev_0.7.3-2+deb9u3_amd64.deb
cac47a718b5b9c5949f7a3ceb356c29a378ba6e8 257914 libssh-doc_0.7.3-2+deb9u3_all.deb
323ed9c437faa7d61116467a1e35e60a904a0253 435438 libssh-gcrypt-4-dbgsym_0.7.3-2+deb9u3_amd64.deb
9af31e96901f09fc6f92bf180f8bfa6b33007072 170514 libssh-gcrypt-4_0.7.3-2+deb9u3_amd64.deb
5b5f869ef344b70fd129404ae7f23bbf3601cfa7 213160 libssh-gcrypt-dev_0.7.3-2+deb9u3_amd64.deb
ba0e382029274fd1e4c054053d77ad9a30db71d4 9439 libssh_0.7.3-2+deb9u3_amd64.buildinfo
Checksums-Sha256:
6db68cff513cb4bf192b102f8291440f30b5bc24dd814cee61b3e893723e2dbb 2459 libssh_0.7.3-2+deb9u3.dsc
d96e1f0f40be9484bc19b9e405bd808e16e784f0d11d956212f431ea0e06c996 25964 libssh_0.7.3-2+deb9u3.debian.tar.xz
ce9bd6faa5bcfc669f9a1ae767942b89683d0f317935f530884e864fac34eb3e 470388 libssh-4-dbgsym_0.7.3-2+deb9u3_amd64.deb
c14668e7028131e4e24cc9b0147dd959270777ac96e68e4a5fd53887ce7fc5c1 171166 libssh-4_0.7.3-2+deb9u3_amd64.deb
949cc04853724459450279b654c23a8094299b20a5d538ec5af0d454b8d5f5e2 213854 libssh-dev_0.7.3-2+deb9u3_amd64.deb
fd4bd31117fa7f105d76be4c3db2502ddc682a74d8cb2283b33287b9a2c0b0b3 257914 libssh-doc_0.7.3-2+deb9u3_all.deb
7a037272f65c746a5dd8bd4c64484c4a7d666be2679a2efe320a3f6644c13bf8 435438 libssh-gcrypt-4-dbgsym_0.7.3-2+deb9u3_amd64.deb
c3af4b11a06d566c335fc0721cbb019279d6b85090c7b04b477ef35734340ff1 170514 libssh-gcrypt-4_0.7.3-2+deb9u3_amd64.deb
a31bc8a7b7fa5d8a9624681b01ff04758b5032b6251490b11e8514978c5cc6ac 213160 libssh-gcrypt-dev_0.7.3-2+deb9u3_amd64.deb
3ba722e086bea92117b39eb232e8e5fd16c1301be6b9f926c3e96b88e0e04e51 9439 libssh_0.7.3-2+deb9u3_amd64.buildinfo
Files:
1bfc799768bf54bcb3dd47db07edcffd 2459 libs optional libssh_0.7.3-2+deb9u3.dsc
cee0266cb48493da2f58ab4428c385c5 25964 libs optional libssh_0.7.3-2+deb9u3.debian.tar.xz
88456eff047e969b369b41ebb0b3df06 470388 debug extra libssh-4-dbgsym_0.7.3-2+deb9u3_amd64.deb
00cf5d4f5e9f3be9d4eeb16c5a54f2c8 171166 libs optional libssh-4_0.7.3-2+deb9u3_amd64.deb
38c3bded1834debc5894a5160e2b37de 213854 libdevel optional libssh-dev_0.7.3-2+deb9u3_amd64.deb
b4b3f0a0d78588fc35d68ae500113fda 257914 doc optional libssh-doc_0.7.3-2+deb9u3_all.deb
528f3be1fc5da901764c5445ec81f49e 435438 debug extra libssh-gcrypt-4-dbgsym_0.7.3-2+deb9u3_amd64.deb
44e58418a96c6cadce5b33ed6e3cb40a 170514 libs optional libssh-gcrypt-4_0.7.3-2+deb9u3_amd64.deb
e8c7be82bde9ac0768136e01834156c3 213160 libdevel optional libssh-gcrypt-dev_0.7.3-2+deb9u3_amd64.deb
1639c98a2db7ec34b6b3a91e231588ef 9439 libs optional libssh_0.7.3-2+deb9u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=uy1A
-----END PGP SIGNATURE-----