-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 02 Apr 2019 10:31:13 +0200 Source: libssh2 Binary: libssh2-1 libssh2-1-dev libssh2-1-dbg Architecture: source amd64 Version: 1.4.3-4.1+deb8u3 Distribution: jessie-security Urgency: medium Maintainer: Mikhail Gusarov <dottedmag@debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Description: libssh2-1 - SSH2 client-side library libssh2-1-dbg - SSH2 client-side library (debug package) libssh2-1-dev - SSH2 client-side library (development headers) Changes: libssh2 (1.4.3-4.1+deb8u3) jessie-security; urgency=medium . * CVE-2019-3859: Regression fix. Fix user authentication. See https://github.com/libssh2/libssh2/pull/327 for details. Thanks to Salvatore Bonaccorso for noticing this. Checksums-Sha1: 8c905f36b2bd7518e72d90c0cc6bc12abd853c9e 1928 libssh2_1.4.3-4.1+deb8u3.dsc c136bf05bc08d6c01b1c56ee73c9e42149da981f 15632 libssh2_1.4.3-4.1+deb8u3.debian.tar.xz 8dbe49148822d8e8b99c2ae0fe0562deeeea7716 127372 libssh2-1_1.4.3-4.1+deb8u3_amd64.deb 2d92706845a5a892e0eb3f9d90585ed343a0e9e9 291956 libssh2-1-dev_1.4.3-4.1+deb8u3_amd64.deb 34d664881f32d92c0d7ad5abff1bd96b4e4d530a 232636 libssh2-1-dbg_1.4.3-4.1+deb8u3_amd64.deb Checksums-Sha256: 31de099ac637f875c752833d449f2df7f555025e5535dea8bf622a15c22831ef 1928 libssh2_1.4.3-4.1+deb8u3.dsc b25cc7bc596134042c4df08e2b9cc188d83ffb112e501f45571eca698766c730 15632 libssh2_1.4.3-4.1+deb8u3.debian.tar.xz a7f43dba97eaac53bad54b2888b07f6821354178cd2cdaa95994b259c7d34fd8 127372 libssh2-1_1.4.3-4.1+deb8u3_amd64.deb 69caa6232588e63ce52d9f161d6e9184650d73f4843d45dbd5d250d91ad9f9e3 291956 libssh2-1-dev_1.4.3-4.1+deb8u3_amd64.deb 5881ad485e316b5666c793e1bf0f328df19adb40e9615c36b594ebc8dd464809 232636 libssh2-1-dbg_1.4.3-4.1+deb8u3_amd64.deb Files: df0d3591c97d0dd55cfed9aff421e05b 1928 libs optional libssh2_1.4.3-4.1+deb8u3.dsc 090b3a18530828f533782f7c102359b0 15632 libs optional libssh2_1.4.3-4.1+deb8u3.debian.tar.xz 71a7a46e548b8850014096cfa486ef68 127372 libs optional libssh2-1_1.4.3-4.1+deb8u3_amd64.deb ce050cd7389268fbaf781138f50993a4 291956 libdevel optional libssh2-1-dev_1.4.3-4.1+deb8u3_amd64.deb 5287612f1038a5b7c0188f253a4dc0c9 232636 debug extra libssh2-1-dbg_1.4.3-4.1+deb8u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAlyjIQ4VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxQIUP/2X2dhhGWp6sAzCX9u9owweGe0rt lM2H7d2TGYPwpYTsr49d/F7eBZ+HvJKOGpXj6FNp1a4DCAm8YLPJC0B4DW/ZPXnF Ujc2xMyIbwtpUuA0NnUNXrWZg8Xq/pw0xLQIgxHImTXNF3AsB8LrmpNv6DqgyaWv aDPlWhkwtXImpm65YusyXOvd059+yPdzOEGSIDs3b8UPvbEF2rvMU3FABvNTKxxp SoBtWCEI601XI3CKdo9U/WXJedK4yBumofuav4gUtEY4vAbKU8V2Xz/dHWHj+vPF OXRL/kFTAf2oLfYRgN8zpf7NXNWC0B8H7MMuvwiY/kNOD1xArf6cu2dZ4He2OBUs /AfCCHLIslps5CwPn+MctUODiYkWA1mAlsqNexZyUK7WluNiE1a2I3KXs4srYJG2 j8EetqV5CipWkhEQp3UBV+4nA3m0pz6pvnbDA8yTvqd2oxFT56PTUAjnxbKrrENN nwAv1Kd+i2Ly2P+VUIfHr4LeYKTKPWZ0cUoonnefcpa5otyd/wlXdjWXPJlN60Sx 6BJSlQ/mN7vub8AzXc/7rlmhIDphn+OGMTZP41JRskCIDT6fVub5X1li6jl/HmNe DUMNKV/T4Jf9yCBZ1OO+uMM5V71usQwCBcFBaAQVTWSksFdW7ry+B1qDxIS1JsO8 I6P+H1Al5y8ZCw8s =Emt8 -----END PGP SIGNATURE-----