Ubuntu
libssh package

libssh 0.9.6-2ubuntu0.22.04.2 source package in Ubuntu

Changelog

libssh (0.9.6-2ubuntu0.22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Prefix truncation attack on BPP
    - debian/patches/CVE-2023-48795-1.patch: add client side mitigation.
    - debian/patches/CVE-2023-48795-2.patch: add server side mitigations.
    - debian/patches/CVE-2023-48795-3.patch: strip extensions from both kex
      lists for matching.
    - debian/patches/CVE-2023-48795-4.patch: tests: adjust calculation to
      strict kex.
    - CVE-2023-48795

 -- Marc Deslauriers <email address hidden>  Mon, 18 Dec 2023 17:30:05 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libssh_0.9.6.orig.tar.xz 1.0 MiB 86bcf885bd9b80466fe0e05453c58b877df61afa8ba947a58c356d7f0fab829b
libssh_0.9.6.orig.tar.xz.asc 833 bytes 050d4e532a614c20b4830ebc210bb28acee2ed458e694c8aedfe2ab152688298
libssh_0.9.6-2ubuntu0.22.04.2.debian.tar.xz 39.8 KiB f9782d7e283d0265e1ba4efe2f1f1a2c909a117401a65531bc874e72701907ea
libssh_0.9.6-2ubuntu0.22.04.2.dsc 2.8 KiB 5c511eaecbc89251975d3899a41ef51780dc9804b270e71cc605e14bc443e81b

View changes file

Binary packages built by this source

libssh-4: tiny C SSH library (OpenSSL flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains shared libraries linked against OpenSSL.

libssh-4-dbgsym: debug symbols for libssh-4
libssh-dev: tiny C SSH library - Development files (OpenSSL flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains development files to build the OpenSSL flavor.

libssh-doc: tiny C SSH library - Documentation files

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains documentation files.

libssh-gcrypt-4: tiny C SSH library (gcrypt flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains shared libraries linked against gcrypt.

libssh-gcrypt-4-dbgsym: debug symbols for libssh-gcrypt-4
libssh-gcrypt-dev: tiny C SSH library - Development files (gcrypt flavor)

 The ssh library was designed to be used by programmers needing a working SSH
 implementation by the mean of a library. The complete control of the client
 is made by the programmer. With libssh, you can remotely execute programs,
 transfer files, use a secure and transparent tunnel for your remote programs.
 With its SFTP implementation, you can play with remote files easily.
 .
 This package contains development files to build the gcrypt flavor.