libssh2 (1.7.0-1ubuntu1) zesty; urgency=medium
* SECURITY UPDATE: Generated secrets too short during key exchange
(LP: #1664812).
- debian/patches/CVE-2016-0787.patch: convert bytes to bits in random
number generation. Based on upstream patch.
- CVE-2016-0787
-- Brian Morton <email address hidden> Tue, 14 Feb 2017 22:51:13 -0500