[ubuntu/lucid-updates] libssh 0.4.2-1ubuntu1.1 (Accepted)
Ubuntu Archive Robot
cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Mon Nov 26 18:28:14 UTC 2012
libssh (0.4.2-1ubuntu1.1) lucid-security; urgency=low
* SECURITY UPDATE: denial of service and possible code execution via
multiple double free flaws
- debian/patches/CVE-2012-4559.patch: properly do frees in
libssh/agent.c, libssh/channels.c, libssh/sftp.c.
- CVE-2012-4559
* SECURITY UPDATE: denial of service and possible code execution via
multiple invalid free flaws
- debian/patches/CVE-2012-4561.patch: properly zero structs in
libssh/keys.c.
- CVE-2012-4561
* SECURITY UPDATE: denial of service and possible code execution via
multiple improper overflow checks
- debian/patches/CVE-2012-4562.patch: do proper overflow checks in
libssh/buffer.c, libssh/dh.c, libssh/string.c.
- CVE-2012-4562
Date: 2012-11-22 19:45:15.988872+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/lucid/+source/libssh/0.4.2-1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Lucid-changes
mailing list