-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 23 May 2019 08:55:12 +0000
Source: libssh
Architecture: source
Version: 0.8.7-1
Distribution: unstable
Urgency: medium
Maintainer: Laurent Bigonville <bigon@debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Changes:
libssh (0.8.7-1) unstable; urgency=medium
.
* New upstream bug fix release 0.8.7.
This fixes various crashes, buffer overflows, and other bugs.
Drop our three backported patches, they are included in this release
now. For details, see
https://git.libssh.org/projects/libssh.git/log/?h=stable-0.8
* autopkgtest: Check ssh server under valgrind.
This exposes a long-standing libssh bug with the curve25519-sha256 key
exchange algorithm, causing an "incorrect signature" failure on 32 bit
machines under valgrind. Add a hack to switch to a different algorithm,
until this is properly investigated and reported.
Checksums-Sha1:
006d33ebe1b5496cb2e3b533d7e42057e233cb63 2436 libssh_0.8.7-1.dsc
29ed6d9517ce270fee993cccb0219bd16a595bcc 430104 libssh_0.8.7.orig.tar.xz
97201aa054ddf1cebcd1b38b11810913d4acad47 26212 libssh_0.8.7-1.debian.tar.xz
f668f41c7351ce80d08ce6ecd4083e7b4003a2bd 5505 libssh_0.8.7-1_source.buildinfo
Checksums-Sha256:
86eac33fbdb9aa5d1dbcae383198fba93067d7e85c72ff5e99a475b445452bf7 2436 libssh_0.8.7-1.dsc
43304ca22f0ba0b654e14b574a39816bc70212fdea5858a6637cc26cade3d592 430104 libssh_0.8.7.orig.tar.xz
9a66708a602bdfb19a41aea677ea1d49f9a722b3d42772985e19238a19e85ea4 26212 libssh_0.8.7-1.debian.tar.xz
45baf492a2dc60efd6152b336137a3e4aa0cd8e13d53a8ddbb55b2454a717ab2 5505 libssh_0.8.7-1_source.buildinfo
Files:
3b9aa716e89635bca0e3abdd270ca63f 2436 libs optional libssh_0.8.7-1.dsc
ea58020e29419ef29b5f24cae22bdfe0 430104 libs optional libssh_0.8.7.orig.tar.xz
e2f6a8c885942cc43baa96411e9d62c8 26212 libs optional libssh_0.8.7-1.debian.tar.xz
5fc8ceab38ce413f8e0beeffcae91c63 5505 libs optional libssh_0.8.7-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=i3Ki
-----END PGP SIGNATURE-----
