UbuntuUpdates.org

Package "libssh2"

Name: libssh2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • SSH2 client-side library
  • SSH2 client-side library (development headers)

Latest version: 1.8.0-2.1ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe

Links



Other versions of "libssh2" in Focal

Repository Area Version
base universe 1.8.0-2.1build1
updates universe 1.8.0-2.1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.8.0-2.1ubuntu0.1 2023-09-14 17:06:52 UTC

  libssh2 (1.8.0-2.1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: out of bounds memory access
    - debian/patches/CVE-2020-22218.patch: adds check for uninitialized
      variable total_num in _libssh2_transport_read of src/transport.c.
    - CVE-2020-22218

 -- Ian Constantin <email address hidden> Thu, 14 Sep 2023 12:04:15 +0300

CVE-2020-22218 An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.



About   -   Send Feedback to @ubuntu_updates