UbuntuUpdates.org

Package "libssh2-1"

Name: libssh2-1

Description:

SSH2 client-side library
Latest version: 1.5.0-2ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: universe
Head package: libssh2
Homepage: http://libssh2.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libssh2-1"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libssh2-1" in Xenial

Repository Area Version
base universe 1.5.0-2
updates universe 1.5.0-2ubuntu0.1

Changelog

Version: 1.5.0-2ubuntu0.1 2017-02-16 07:07:26 UTC

  libssh2 (1.5.0-2ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Generated secrets too short during key exchange
    (LP: #1664812).
    - debian/patches/CVE-2016-0787.patch: convert bytes to bits in random
      number generation. Based on upstream patch.
    - CVE-2016-0787

 -- Brian Morton <email address hidden> Tue, 14 Feb 2017 23:33:00 -0500
1664812 CVE-2016-0787
CVE-2016-0787 The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in


About   -   Send Feedback to @ubuntu_updates