Format: 1.8 Date: Thu, 22 Nov 2012 13:34:54 -0500 Source: libssh Binary: libssh-4 libssh-dev libssh-dbg libssh-doc Architecture: all i386 Version: 0.5.2-1ubuntu0.12.10.1 Distribution: quantal Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: libssh-4 - tiny C SSH library libssh-dbg - tiny C SSH library. Debug symbols libssh-dev - tiny C SSH library. Development files libssh-doc - tiny C SSH library. Documentation files Changes: libssh (0.5.2-1ubuntu0.12.10.1) quantal-security; urgency=low . * SECURITY UPDATE: denial of service and possible code execution via multiple double free flaws - debian/patches/CVE-2012-4559.patch: properly do frees in src/agent.c, src/channels.c, src/sftp.c. - CVE-2012-4559 * SECURITY UPDATE: denial of service and possible code execution via multiple buffer overflows - debian/patches/CVE-2012-4560.patch: properly calculate sizes in src/misc.c. - CVE-2012-4560 * SECURITY UPDATE: denial of service and possible code execution via multiple invalid free flaws - debian/patches/CVE-2012-4561.patch: don't use after free in src/keyfiles.c, properly zero structs in src/keys.c. - CVE-2012-4561 * SECURITY UPDATE: denial of service and possible code execution via multiple improper overflow checks - debian/patches/CVE-2012-4562.patch: do proper overflow checks in src/buffer.c, src/dh.c, src/string.c. - CVE-2012-4562 Checksums-Sha1: aeb46b4c32a9bad7171903e8a2aecf578d277202 265016 libssh-doc_0.5.2-1ubuntu0.12.10.1_all.deb a5a6b09b105f2d67b2816f1067063b1ab7753587 123702 libssh-4_0.5.2-1ubuntu0.12.10.1_i386.deb 37b92d4d8d54e89fa0902d692e06407d3b9017b8 170324 libssh-dev_0.5.2-1ubuntu0.12.10.1_i386.deb 16e898575b5a3e95b845db134fb81dc53adedde7 321402 libssh-dbg_0.5.2-1ubuntu0.12.10.1_i386.deb Checksums-Sha256: 05fd6d35e62b83a6fc108236bb3ff3a859e4efd227bb9a8ccf8691f1ea6748bf 265016 libssh-doc_0.5.2-1ubuntu0.12.10.1_all.deb a82e4e86f1daec08ca7111e7cf84471213f92b2dc3677836260524a7020ae647 123702 libssh-4_0.5.2-1ubuntu0.12.10.1_i386.deb 5d0cd30581ac88eb04d3453f49ac2508cd68da44d6320d968c7cef88a461fcae 170324 libssh-dev_0.5.2-1ubuntu0.12.10.1_i386.deb b9249f7fe839d847095b655ffb290bd07e4e64d54c6a3ede0e6fa661d148640b 321402 libssh-dbg_0.5.2-1ubuntu0.12.10.1_i386.deb Files: 85666400753c92083e290eec1eb586cf 265016 doc optional libssh-doc_0.5.2-1ubuntu0.12.10.1_all.deb 37335c459649777b65f4b42fab39b8e7 123702 libs optional libssh-4_0.5.2-1ubuntu0.12.10.1_i386.deb b8b4874c8de59ce5d6d135fcbc666206 170324 libdevel optional libssh-dev_0.5.2-1ubuntu0.12.10.1_i386.deb 9619dac534c7152eee108c8e71aaeb3f 321402 debug extra libssh-dbg_0.5.2-1ubuntu0.12.10.1_i386.deb Original-Maintainer: Laurent Bigonville