Ubuntu
libssh package

libssh 0.8.6-3ubuntu0.3 source package in Ubuntu

Changelog

libssh (0.8.6-3ubuntu0.3) disco-security; urgency=medium

  * SECURITY UPDATE: unsanitized location in scp could lead to unwanted
    command execution
    - debian/patches/CVE-2019-14889-1.patch: reformat code in scp/scp.c.
    - debian/patches/CVE-2019-14889-2.patch: log SCP warnings received from
      the server in src/scp.c.
    - debian/patches/CVE-2019-14889-3.patch: add function to quote file
      names in include/libssh/misc.h, src/misc.c.
    - debian/patches/CVE-2019-14889-4.patch: don't allow file path longer
      than 32kb in src/scp.c.
    - debian/patches/CVE-2019-14889-5.patch: quote location to be used on
      shell in src/scp.c.
    - CVE-2019-14889

 -- Marc Deslauriers <email address hidden>  Tue, 10 Dec 2019 10:28:34 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libssh_0.8.6.orig.tar.xz 423.5 KiB 1046b95632a07fc00b1ea70ee683072d0c8a23f544f4535440b727812002fd01
libssh_0.8.6-3ubuntu0.3.debian.tar.xz 35.6 KiB 2a83941a4b25e3fa72634620d1315734671eccddaa3404a7a41fe9a2d85d95b3
libssh_0.8.6-3ubuntu0.3.dsc 2.5 KiB 5180f894285191ba1ad0146dcb719588235c395755588e1d27767ea17a5ef802

View changes file

Binary packages built by this source

libssh-4: No summary available for libssh-4 in ubuntu disco.

No description available for libssh-4 in ubuntu disco.

libssh-4-dbgsym: No summary available for libssh-4-dbgsym in ubuntu disco.

No description available for libssh-4-dbgsym in ubuntu disco.

libssh-dev: No summary available for libssh-dev in ubuntu disco.

No description available for libssh-dev in ubuntu disco.

libssh-doc: No summary available for libssh-doc in ubuntu disco.

No description available for libssh-doc in ubuntu disco.

libssh-gcrypt-4: No summary available for libssh-gcrypt-4 in ubuntu disco.

No description available for libssh-gcrypt-4 in ubuntu disco.

libssh-gcrypt-4-dbgsym: No summary available for libssh-gcrypt-4-dbgsym in ubuntu disco.

No description available for libssh-gcrypt-4-dbgsym in ubuntu disco.

libssh-gcrypt-dev: No summary available for libssh-gcrypt-dev in ubuntu disco.

No description available for libssh-gcrypt-dev in ubuntu disco.