Package: release.debian.org Severity: normal User: [email protected] Usertags: pu
Hi, I'm planning to upload a fix for bug #698963 (CVE-2013-0176) in stable-proposed-updates. CVE-2013-0176 is about a DOS in the server code that can be triggered in some situations. Cheers Laurent Bigonville -- System Information: Debian Release: 7.0 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.7-trunk-amd64 (SMP w/8 CPU cores) Locale: LANG=fr_BE.utf8, LC_CTYPE=fr_BE.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash
diff -Naur libssh-0.4.5.orig/debian/patches/CVE-2013-0176.patch libssh-0.4.5/debian/patches/CVE-2013-0176.patch --- libssh-0.4.5.orig/debian/patches/CVE-2013-0176.patch 1970-01-01 01:00:00.000000000 +0100 +++ libssh-0.4.5/debian/patches/CVE-2013-0176.patch 2013-03-01 10:55:34.655791206 +0100 @@ -0,0 +1,34 @@ +Fix CVE-2013-0176 + +Original patch: http://git.libssh.org/projects/libssh.git/patch/?id=55b09f426417406bb25c0b9c474fbab1398b0dc8 + +Patch based on backport from Marc Deslauriers + +diff -aur libssh-0.4.5.orig/libssh/server.c libssh-0.4.5/libssh/server.c +--- libssh-0.4.5.orig/libssh/server.c 2010-07-13 10:15:57.000000000 +0200 ++++ libssh-0.4.5/libssh/server.c 2013-03-01 10:30:39.751718858 +0100 +@@ -402,7 +402,11 @@ + prv = session->rsa_key; + break; + default: +- prv = NULL; ++ ssh_set_error(session, ++ SSH_FATAL, ++ "Could not determine the specified hostkey"); ++ string_free(f); ++ return -1; + } + + pub = publickey_from_privatekey(prv); +@@ -530,7 +534,9 @@ + } + + ssh_list_kex(session, &session->client_kex); +- crypt_set_algorithms_server(session); ++ if (crypt_set_algorithms_server(session) == SSH_ERROR) { ++ return -1; ++ } + + if (dh_handshake_server(session) < 0) { + return -1; + diff -Naur libssh-0.4.5.orig/debian/patches/series libssh-0.4.5/debian/patches/series --- libssh-0.4.5.orig/debian/patches/series 2012-11-28 01:03:23.000000000 +0100 +++ libssh-0.4.5/debian/patches/series 2013-03-01 10:55:42.455791585 +0100 @@ -3,3 +3,4 @@ CVE-2012-4559.patch CVE-2012-4561.patch CVE-2012-4562.patch +CVE-2013-0176.patch
