-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 18 Oct 2018 02:32:43 +0100 Source: libssh Binary: libssh-4 libssh-gcrypt-4 libssh-dev libssh-gcrypt-dev libssh-dbg libssh-doc Architecture: source amd64 all Version: 0.6.3-4+deb8u3 Distribution: jessie-security Urgency: high Maintainer: Laurent Bigonville <bigon@debian.org> Changed-By: Ben Hutchings <ben@decadent.org.uk> Description: libssh-4 - tiny C SSH library (OpenSSL flavor) libssh-dbg - tiny C SSH library. Debug symbols libssh-dev - tiny C SSH library. Development files (OpenSSL flavor) libssh-doc - tiny C SSH library. Documentation files libssh-gcrypt-4 - tiny C SSH library (gcrypt flavor) libssh-gcrypt-dev - tiny C SSH library. Development files (gcrypt flavor) Closes: 911149 Changes: libssh (0.6.3-4+deb8u3) jessie-security; urgency=high . * Non-maintainer upload by the LTS team * CVE-2018-10933: Authentication bypass in server code (Closes: #911149) * pki: Make sure sig is not used unintialized Checksums-Sha1: fe416f75c388d0c0ba5ffabd0edeb9ef784462c6 2334 libssh_0.6.3-4+deb8u3.dsc 5709958c02586da46379db3ce25ab8aca8eed109 26084 libssh_0.6.3-4+deb8u3.debian.tar.xz 34b51189e2e96a7319069bba156bd79d2112d56e 129478 libssh-4_0.6.3-4+deb8u3_amd64.deb a7d6f273b1d2f644c1817d3328527ea25e4e262d 129394 libssh-gcrypt-4_0.6.3-4+deb8u3_amd64.deb 845e3eeb5a82a469e2408d4df3fd03cf2d6dff8e 162916 libssh-dev_0.6.3-4+deb8u3_amd64.deb 2ed76adb1c1c53bd85c952df49c66f15600f01f1 162574 libssh-gcrypt-dev_0.6.3-4+deb8u3_amd64.deb ff3790fc03db6d1129af7378451a8b6e6d9f3a4f 768424 libssh-dbg_0.6.3-4+deb8u3_amd64.deb 545bc811ffbaa0c97faae5a98d532d550a69b473 199580 libssh-doc_0.6.3-4+deb8u3_all.deb Checksums-Sha256: 0b743068e480849306c37ff32ba7f790b45b1b607d7cf77ae7c0f5e0208ea929 2334 libssh_0.6.3-4+deb8u3.dsc 583ec9139c99d5292e473ffbf60165f5395de9419fee7ac1fa2cbee9c87d5544 26084 libssh_0.6.3-4+deb8u3.debian.tar.xz 7456b17b9f30e31e55a3555bad88d60cce1f09f28891934ad9b2340856fb5495 129478 libssh-4_0.6.3-4+deb8u3_amd64.deb 9e18e0628eb62bb70e05f06ee90e2218b3272ed161be1fa99621669c38157c2e 129394 libssh-gcrypt-4_0.6.3-4+deb8u3_amd64.deb 46ca30a03695247a0a6ff9e29578e830a071c15964b14a878267aecddffcf996 162916 libssh-dev_0.6.3-4+deb8u3_amd64.deb c13e3fd5215dd1a1a08c51e5ada94e6b78a877f9e20d5aceca19251712253f4d 162574 libssh-gcrypt-dev_0.6.3-4+deb8u3_amd64.deb 51bdc195ef826bafb1599b4c56cf50015ac3710c250cbeaafd0f057f5bc92581 768424 libssh-dbg_0.6.3-4+deb8u3_amd64.deb 006308d9dace535ddde8235a71678d16d4b786ad8814181d4acebe56b3dfd67f 199580 libssh-doc_0.6.3-4+deb8u3_all.deb Files: 304c5e2e66629f2d7edebfcd94074d83 2334 libs optional libssh_0.6.3-4+deb8u3.dsc 0dba0547d13a1f54c6bf18be05c0eb21 26084 libs optional libssh_0.6.3-4+deb8u3.debian.tar.xz 30d30a83c9e4a2333f71133be2c1fb2a 129478 libs optional libssh-4_0.6.3-4+deb8u3_amd64.deb 8e4f27b238a44e98dc91345dcc75ef74 129394 libs optional libssh-gcrypt-4_0.6.3-4+deb8u3_amd64.deb 74bf055c03739b3b2928d60f277baf8f 162916 libdevel optional libssh-dev_0.6.3-4+deb8u3_amd64.deb 3b65f413f1c245f96143a204b825011c 162574 libdevel optional libssh-gcrypt-dev_0.6.3-4+deb8u3_amd64.deb bb5540ea4634500f9e7d3b8e2bdfa7aa 768424 debug extra libssh-dbg_0.6.3-4+deb8u3_amd64.deb e2df44d7de64f573ac607cc93e26defc 199580 doc optional libssh-doc_0.6.3-4+deb8u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAlvH6sEACgkQ57/I7JWG EQnldg/9HmQfe+Zce2vBdX+m6VkgFIEu74CssxtoN53M+jk/0BHAtb1McvOQnXas 5qSa4EcA0hyz1S/W4AEoXJWrb/2m8brNZZdqXmeLiuTFsA1AvAQaVpV42cKuuUe1 ddwkf+aFmj+amDFZ5LRB+fDfoM3HFV5WZ+KAW/1pqjrX3HAtfWvrTQayOIz0ax3t aTjkWbO7/MWSPbFOqsVFtV0uM2X1KQXdfnclAD9y1Ar5NDBuFi898N5HWePNzo+K GJ9nWrgX25r5YNhO6D+sNVwO5JCa1Z75pxNqmQ6163ncCEZQjyh1YEXs6nx9lpfA dtBhtIuo3JFlTbGcQY9YqVdFGMY7OS/Z9g/EyHJ/MCqq51IJiuu9tTkMcVzoqTAN ThBap57kfsCo/jV+qC9YmB2Gh1ZIkY6zcSYF1G0rv7q1Z7/JzD1+Vv7Nz7YUkAtC 9qlOBZRKPjaHfoaQmFBYj3CWV4vda3xgRkc1TTOYevGKpDtYdfpiZDRiwqPGJOql tRJOtJbILD8gkOVb0czcnohe52auTdZZxA1HwKPqeUoqhop44IEKeNv7FpjEfN8p RZ85ugyZj4N+djX8hyzexnqKPJL2c1HSnjPkghKUYiUev2odk8ShFPwzpXW238Pm Lfgbszj1uIvfOODUcA9aUDgRTDVONGEAtobDZjDUgEbM07w09nc= =LH2q -----END PGP SIGNATURE-----