libssh2

A library implementing the SSH2 protocol

Description

libssh2 is a library implementing the SSH2 protocol as defined by
Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25),
SECSH-CONNECTION(23), SECSH-ARCH(20), SECSH-FILEXFER(06)*,
SECSH-DHGEX(04), and SECSH-NUMBERS(10).
Website: http://www.libssh2.org/
License: BSD
Vendor: Baruwa Enterprise Edition https://packages.baruwa.com/
Group: system environment/libraries

Packages

libssh2-1.4.2-3.el6_10.1.x86_64 [123 KiB] Changelog by Kamil Dudka (2019-03-19):
- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)
libssh2-1.4.2-2.el6_7.1.x86_64 [122 KiB] Changelog by Kamil Dudka (2016-02-19):
- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)