[ubuntu/zesty-proposed] libssh2 1.7.0-1ubuntu1 (Accepted)

Brian Morton rokclimb15 at gmail.com
Thu Feb 16 04:19:15 UTC 2017


libssh2 (1.7.0-1ubuntu1) zesty; urgency=medium

  * SECURITY UPDATE: Generated secrets too short during key exchange
    (LP: #1664812).
    - debian/patches/CVE-2016-0787.patch: convert bytes to bits in random
      number generation. Based on upstream patch.
    - CVE-2016-0787

Date: Tue, 14 Feb 2017 22:51:13 -0500
Changed-By: Brian Morton <rokclimb15 at gmail.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Tyler Hicks <tyhicks at canonical.com>
https://launchpad.net/ubuntu/+source/libssh2/1.7.0-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 14 Feb 2017 22:51:13 -0500
Source: libssh2
Binary: libssh2-1 libssh2-1-dev libssh2-1-dbg
Architecture: source
Version: 1.7.0-1ubuntu1
Distribution: zesty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Brian Morton <rokclimb15 at gmail.com>
Description:
 libssh2-1  - SSH2 client-side library
 libssh2-1-dbg - SSH2 client-side library (debug package)
 libssh2-1-dev - SSH2 client-side library (development headers)
Launchpad-Bugs-Fixed: 1664812
Changes:
 libssh2 (1.7.0-1ubuntu1) zesty; urgency=medium
 .
   * SECURITY UPDATE: Generated secrets too short during key exchange
     (LP: #1664812).
     - debian/patches/CVE-2016-0787.patch: convert bytes to bits in random
       number generation. Based on upstream patch.
     - CVE-2016-0787
Checksums-Sha1:
 e7ebf4aa5360a428e537538e1170588744039cce 1953 libssh2_1.7.0-1ubuntu1.dsc
 937379c6d749bb47c07b3d61f6d8bbce79550f3c 7148 libssh2_1.7.0-1ubuntu1.debian.tar.xz
Checksums-Sha256:
 d8406bd7506594fce408655df3a21db9573583342a7ed1be0234fc5956ccc51a 1953 libssh2_1.7.0-1ubuntu1.dsc
 5c3e1737ee30db9e05505498b28e6d519f5d9567a5b48870ff2715e73693f1f4 7148 libssh2_1.7.0-1ubuntu1.debian.tar.xz
Files:
 843ca65de0d15aeb306e1e58c5d439a8 1953 libs optional libssh2_1.7.0-1ubuntu1.dsc
 042376d2dcdb5826b8fd40c9f220c158 7148 libs optional libssh2_1.7.0-1ubuntu1.debian.tar.xz
Original-Maintainer: Mikhail Gusarov <dottedmag at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=d6Qi
-----END PGP SIGNATURE-----


More information about the Zesty-changes mailing list