[ubuntu/lucid-security] libssh 0.4.2-1ubuntu1.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Nov 26 17:44:15 UTC 2012
libssh (0.4.2-1ubuntu1.1) lucid-security; urgency=low
* SECURITY UPDATE: denial of service and possible code execution via
multiple double free flaws
- debian/patches/CVE-2012-4559.patch: properly do frees in
libssh/agent.c, libssh/channels.c, libssh/sftp.c.
- CVE-2012-4559
* SECURITY UPDATE: denial of service and possible code execution via
multiple invalid free flaws
- debian/patches/CVE-2012-4561.patch: properly zero structs in
libssh/keys.c.
- CVE-2012-4561
* SECURITY UPDATE: denial of service and possible code execution via
multiple improper overflow checks
- debian/patches/CVE-2012-4562.patch: do proper overflow checks in
libssh/buffer.c, libssh/dh.c, libssh/string.c.
- CVE-2012-4562
Date: 2012-11-22 19:45:15.988872+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/lucid/+source/libssh/0.4.2-1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Lucid-changes
mailing list