-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Oct 2026 10:43:58 -0500 Source: libssh Architecture: source Version: 0.10.6-0+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: Laurent Bigonville <bigon@debian.org> Changed-By: Simon Quigley <tsimonq2@debian.org> Changes: libssh (0.10.6-0+deb12u3) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-0964: reject invalid file names from an SCP server. * CVE-2026-0965: do not read non-regular or oversized config files. * CVE-2026-0966: fix a heap buffer underflow in ssh_get_hexa(). * CVE-2026-0967: make match_pattern() iterative to avoid a ReDoS. * CVE-2026-0968: stop sftp_parse_longname() reading past the string. Backport the regression test. * CVE-2026-3731: fix an out of bounds read in the SFTP extension accessors. Backport the regression test. * CVE-2026-59843: fail when the peer sends a maximum packet size of 0. Backport the regression test. * CVE-2026-59844: cap the length accepted in SSH_FXP_READ requests. * CVE-2026-59845: check the fork() return code for ProxyCommand. * CVE-2026-59846: reject usernames with shell metacharacters. 0.10 has no ssh_check_username_syntax(), so this also brings that helper and its call sites across from 0.11.0. * CVE-2026-59847: check AES-GCM tag results correctly with OpenSSL. * CVE-2026-59848: reject SFTP responses with unknown request IDs. Backport the regression test. * CVE-2026-59850: drop DATA packets on remotely closed channels. Backport the regression test. This case calls channel_rcv_data() directly: 0.10 has no sftp server torture harness. Checksums-Sha1: 4655489521c50c76e039b4396eaf28a9cc586901 2792 libssh_0.10.6-0+deb12u3.dsc 15efef1eaf48ea0e8acbcef5e9968b41251c1beb 51044 libssh_0.10.6-0+deb12u3.debian.tar.xz a977308bbcd9d23c5011b11570132af2eeaec2c7 8763 libssh_0.10.6-0+deb12u3_source.buildinfo Checksums-Sha256: 28fd7712a35660d49afd960107ebec8c24d9fbf0a97ca3d5b063b86a444fc339 2792 libssh_0.10.6-0+deb12u3.dsc 70c365d1e289013e5415a967203571bc7e003eb1d12f1d432edda1c50a33bc9a 51044 libssh_0.10.6-0+deb12u3.debian.tar.xz 435598afb1bf972b98266730075a8671dd30814cd407d78baba213202bb6343e 8763 libssh_0.10.6-0+deb12u3_source.buildinfo Files: 2c6f6984e259700f4cb944e22ad6ea11 2792 libs optional libssh_0.10.6-0+deb12u3.dsc f7db9851009a2762fea7937774381d75 51044 libs optional libssh_0.10.6-0+deb12u3.debian.tar.xz 29b8934c1bd7444a7e75c91634ca20c0 8763 libs optional libssh_0.10.6-0+deb12u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAmrXwvkACgkQ4n8s+EWM L6TYkxAAuGhTW4OHI1Hf/UcGnBfZiSxmcWV8WmiDwWMyLxqWE8q7PTDDcF5QAVQs 0P2QBZPDBmD585QwlOyOrHl5FKD+iZ2wcEUrpJpqGgUzsROPc9wySzPuwNY5wtgd Nv5xmhDeiA3eFzcZscFYoJllhwjaNZ7FYwmyvq1FTz4ZHjaZusU+Z5vG7TniQZXe SAPZsQ/y2F/ZqztwMBl/GFPfBhizT1YBXEdyjEmqJh+XXvpPlyphsHMYtB3MFF8g VNWibTsjiBkI/IqZ0c2pX88XRcrmFW7QVvbkqTe/V4Prv3WGS5EPV4Jh0C3t6Za0 T3hVosA8nhQN32tq1DMJGBQuYFxbKu15Agl0vNdmk13vqN0oBCf64l2Bj1o+q4x4 hxJqi4AI5IE2k12fypHs7tdQ9oK9G2SdQQaT/bJWjE501UXC1Go3bycSD89mOjPT PjU+P4HwCy3nwEfdWB5+g4rLkjB/jEcPj2U6gZELXU9DFEXmVGt92TI2jA5005uo L5CnRgo3T73aDBR2NtD6a5hipRk51shI6jgadUu68FP2iqKH/pRYC6WiZ3QYCR9M y10P3gLjJgJ7S0OsOf0VWPdHe/OiymoS5XRQrjpOpI9TbTaJU3ADf+FWwPZn+U9s kmdSvxVACKYvWqALh1bA8H1MdKu5MKE9OLYuRjzGN9eFyIzXePg= =jAuJ -----END PGP SIGNATURE-----
