Format: 1.8 Date: Thu, 22 Nov 2012 14:32:59 -0500 Source: libssh Binary: libssh-4 libssh-dev libssh-dbg libssh-doc Architecture: amd64 Version: 0.4.2-1ubuntu1.1 Distribution: lucid Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: libssh-4 - A tiny C SSH library libssh-dbg - A tiny C SSH library. Debug symbols libssh-dev - A tiny C SSH library. Development files libssh-doc - A tiny C SSH library. Documentation files Changes: libssh (0.4.2-1ubuntu1.1) lucid-security; urgency=low . * SECURITY UPDATE: denial of service and possible code execution via multiple double free flaws - debian/patches/CVE-2012-4559.patch: properly do frees in libssh/agent.c, libssh/channels.c, libssh/sftp.c. - CVE-2012-4559 * SECURITY UPDATE: denial of service and possible code execution via multiple invalid free flaws - debian/patches/CVE-2012-4561.patch: properly zero structs in libssh/keys.c. - CVE-2012-4561 * SECURITY UPDATE: denial of service and possible code execution via multiple improper overflow checks - debian/patches/CVE-2012-4562.patch: do proper overflow checks in libssh/buffer.c, libssh/dh.c, libssh/string.c. - CVE-2012-4562 Checksums-Sha1: 7579b6fe4a97e7e426031d6670e479fbf96a5bc3 104818 libssh-4_0.4.2-1ubuntu1.1_amd64.deb 8f6c66fc4d8846161f211ec756cbdee143f1a1c5 139776 libssh-dev_0.4.2-1ubuntu1.1_amd64.deb e2c88332b0b32510cadd64fa8ed70de314939d52 183092 libssh-dbg_0.4.2-1ubuntu1.1_amd64.deb Checksums-Sha256: 8dbf65d038506ba88f8c9ac2fa8f95a554eb7ebae8bcfad65f3fbd6c483b4885 104818 libssh-4_0.4.2-1ubuntu1.1_amd64.deb cb462ba8e4a46719a1c13a112d09f6f2f0fee7f354346469a39f6bce77c07645 139776 libssh-dev_0.4.2-1ubuntu1.1_amd64.deb 890678a3ed489cb7949bfe686cecee8f0057daef0cad26491735dda76ddacebf 183092 libssh-dbg_0.4.2-1ubuntu1.1_amd64.deb Files: 8f9d4c5710df811865f96b693f0a4721 104818 libs optional libssh-4_0.4.2-1ubuntu1.1_amd64.deb 401e1888f0909997c5800f5d351962f2 139776 libdevel optional libssh-dev_0.4.2-1ubuntu1.1_amd64.deb a3a43664787b8d550e02db2c2e6d439a 183092 debug extra libssh-dbg_0.4.2-1ubuntu1.1_amd64.deb Original-Maintainer: Laurent Bigonville