Описание
Security update for libssh2_org
This update for libssh2_org fixes the following issues:
- Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets)
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.3
libssh2-1-1.4.3-19.9.1
libssh2-1-32bit-1.4.3-19.9.1
libssh2-devel-1.4.3-19.9.1
libssh2_org-1.4.3-19.9.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1640-1
- SUSE Security Ratings
Описание
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
Затронутые продукты
openSUSE Leap 42.3:libssh2-1-1.4.3-19.9.1
openSUSE Leap 42.3:libssh2-1-32bit-1.4.3-19.9.1
openSUSE Leap 42.3:libssh2-devel-1.4.3-19.9.1
openSUSE Leap 42.3:libssh2_org-1.4.3-19.9.1
Ссылки
- CVE-2019-3860
- SUSE Bug 1128481
- SUSE Bug 1135434
- SUSE Bug 1136570