-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 17 Dec 2019 12:12:22 +0100 Source: libssh Binary: libssh-4 libssh-gcrypt-4 libssh-dev libssh-gcrypt-dev libssh-dbg libssh-doc Architecture: source amd64 all Version: 0.6.3-4+deb8u4 Distribution: jessie-security Urgency: medium Maintainer: Laurent Bigonville <bigon@debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Description: libssh-4 - tiny C SSH library (OpenSSL flavor) libssh-dbg - tiny C SSH library. Debug symbols libssh-dev - tiny C SSH library. Development files (OpenSSL flavor) libssh-doc - tiny C SSH library. Documentation files libssh-gcrypt-4 - tiny C SSH library (gcrypt flavor) libssh-gcrypt-dev - tiny C SSH library. Development files (gcrypt flavor) Changes: libssh (0.6.3-4+deb8u4) jessie-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2019-14889: abitrary command execution in the SCP server. Checksums-Sha1: 3f850fd2939da2bcf608d0edbd20d1731f9f17fd 2334 libssh_0.6.3-4+deb8u4.dsc 8189255e0f684d36b7ca62739fa0cd5f1030a467 279492 libssh_0.6.3.orig.tar.xz ba80b05739986917b2fa6173cdabb5ab0fc90ff4 34312 libssh_0.6.3-4+deb8u4.debian.tar.xz b4d8f44e3aa82bfd27d79d68389ca3a91f96b876 129868 libssh-4_0.6.3-4+deb8u4_amd64.deb 5fe420c4436a225cf987cdddf76441ebab34a6e8 129850 libssh-gcrypt-4_0.6.3-4+deb8u4_amd64.deb d10e22cf4b3be6dec6318027d570b731dc19967d 162910 libssh-dev_0.6.3-4+deb8u4_amd64.deb 1b17bc59c5ebfbce1390da5ccc8b6603e02755b6 162584 libssh-gcrypt-dev_0.6.3-4+deb8u4_amd64.deb 5eeb9c8be41cd9d0835f3f2788c72b6ccf8a1b6d 768948 libssh-dbg_0.6.3-4+deb8u4_amd64.deb 461e2c038400d23db2e20b2622ccae22081117f5 199950 libssh-doc_0.6.3-4+deb8u4_all.deb Checksums-Sha256: d4b89c7c6464da4b0fd4682c5a35cd9e9304a626af1a1dca0fccc0640cb0fcc5 2334 libssh_0.6.3-4+deb8u4.dsc 2bb5d7c595059f990a8915c190169257328ffa828ced0c05b09bbe186092cacb 279492 libssh_0.6.3.orig.tar.xz 2705378af5087e7994ece96eefe7967b42448faa72b051d58db7219a59a5770d 34312 libssh_0.6.3-4+deb8u4.debian.tar.xz 93ec1f9cdda805abbb0a45319cf66383cce74c180d2da3ee1a88d2c3dc7cb1b8 129868 libssh-4_0.6.3-4+deb8u4_amd64.deb 4770081fca715d00f3dc346a4bea97dd79f55dd9ddc97b7c16f09dac45d71388 129850 libssh-gcrypt-4_0.6.3-4+deb8u4_amd64.deb 1e24471ba89de9b20bc485c719e31b30970ea875e2a3c25bc31a7f992ef91433 162910 libssh-dev_0.6.3-4+deb8u4_amd64.deb 81e6e57e352ee5c604e12a7515940c909769d35534dffc7829aed59040dc3f46 162584 libssh-gcrypt-dev_0.6.3-4+deb8u4_amd64.deb de25fe1a0a8977c746a249cacc3dd2ee8f63d4f94160dbd70ad6d1185337f43a 768948 libssh-dbg_0.6.3-4+deb8u4_amd64.deb c8d553f2acd2480beae4d1d05b5a64bdcc8f166e6e1b3ddee5fba47024bebee3 199950 libssh-doc_0.6.3-4+deb8u4_all.deb Files: ec1f4d8837146bcaee30a6f774eb5d72 2334 libs optional libssh_0.6.3-4+deb8u4.dsc 66cf16e77f60913b4d54f18c92cdbf71 279492 libs optional libssh_0.6.3.orig.tar.xz 43f5a2c7de72ca40a4ff024f4dbd9fbb 34312 libs optional libssh_0.6.3-4+deb8u4.debian.tar.xz 268951cf793c44f7dcef82f9ca6dce70 129868 libs optional libssh-4_0.6.3-4+deb8u4_amd64.deb e9e8a1d7f4146987e4dc7e0e37e68720 129850 libs optional libssh-gcrypt-4_0.6.3-4+deb8u4_amd64.deb 22c8c882213d691b34ceb0436f944a60 162910 libdevel optional libssh-dev_0.6.3-4+deb8u4_amd64.deb 69348b8b6ccda556654c12175cef174e 162584 libdevel optional libssh-gcrypt-dev_0.6.3-4+deb8u4_amd64.deb cb030e87019442f87eb51f95423c5e5e 768948 debug extra libssh-dbg_0.6.3-4+deb8u4_amd64.deb df1619888ed024b87793822d36b13c04 199950 doc optional libssh-doc_0.6.3-4+deb8u4_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAl34wmcACgkQnUbEiOQ2 gwIwlA//Za0nzognSs3Xep27pjfD2MqHnTDq7x6g2MKxtXNsBWsmbsyOrtKfdU/M n6SDP96isjjNov4av+LpmS5JvaxMBxn5TWTO3S9javfwWi9LzKpXk24GqUXQ9Ncp 5bAbsyAfKMD2pV664qD7WjJpOEzNbPUIFEkpeWHukf2NFhfmCGHLuAayN4hmOvBq eb6xbHazfHJ3+7t0jX1XBD7lnHldr6GwkfMw1zKwryWdQUFI3xUUrhBeu8AwWXt6 PucKFYuFXU+02bLIMnltvskEOIkB9JnchsTvepI3B2SmKZVVDe9agyAXxBQr6hVn eKMp6TvDR0dbbtqVHAbjX1DcdL7hKJIx2/ypfpgWUTEkPGeRA+QcSEonpHuotDB8 pNvnUauuxQyCrcKm+yR9FMIkor0IaZ9ecs2f+RTRXE0yFvPKQcreKgwdWR8Tss1m adNRrQ+oIuMUO9TZl6u99LSG+pduw6Jbc3bvWWD8mULV67s+OxyEVN0EM6e0RgmF sq1LmbvxtoxNzVWAG4vvigLubWA/vvKt16UhWoQRwZR4NwadnEOzCRUuJ8g69hQz 0aXlYcNOQOd6cb4mLaTTgUUzadZFx0uK1moMkjcetopiUlwbxPKpk9bOiDxLiVAZ 9s9ONCrYw6qbd5fsg42N1a4xfBqdxzbkzzqPpOrjj1uuIWVQyPA= =g0fx -----END PGP SIGNATURE-----
