libssh (0.4.2-1ubuntu1.1) lucid-security; urgency=low
* SECURITY UPDATE: denial of service and possible code execution via
multiple double free flaws
- debian/patches/CVE-2012-4559.patch: properly do frees in
libssh/agent.c, libssh/channels.c, libssh/sftp.c.
- CVE-2012-4559
* SECURITY UPDATE: denial of service and possible code execution via
multiple invalid free flaws
- debian/patches/CVE-2012-4561.patch: properly zero structs in
libssh/keys.c.
- CVE-2012-4561
* SECURITY UPDATE: denial of service and possible code execution via
multiple improper overflow checks
- debian/patches/CVE-2012-4562.patch: do proper overflow checks in
libssh/buffer.c, libssh/dh.c, libssh/string.c.
- CVE-2012-4562
Date: 2012-11-22 19:45:15.988872+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/lucid/+source/libssh/0.4.2-1ubuntu1.1
Sorry, changesfile not available.
--
Lucid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/lucid-changes
