Описание
Security update for libssh2_org
This update for libssh2_org fixes the following issues:
- Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103]
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.0
libssh2-1-1.8.0-lp150.3.6.1
libssh2-1-32bit-1.8.0-lp150.3.6.1
libssh2-devel-1.8.0-lp150.3.6.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1291-1
- SUSE Security Ratings
- SUSE Bug 1130103
- SUSE Bug 1133528
- SUSE CVE CVE-2019-3859 page
Описание
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
Затронутые продукты
openSUSE Leap 15.0:libssh2-1-1.8.0-lp150.3.6.1
openSUSE Leap 15.0:libssh2-1-32bit-1.8.0-lp150.3.6.1
openSUSE Leap 15.0:libssh2-devel-1.8.0-lp150.3.6.1
Ссылки
- CVE-2019-3859
- SUSE Bug 1128480
- SUSE Bug 1130103
- SUSE Bug 1135434