Register | Log in

libssh

Choose email to subscribe with

general

source: libssh (main)
version: 0.9.4-1
maintainer: Laurent Bigonville (DMD)
uploaders: Martin Pitt [DMD] – Mike Gabriel [DMD]
arch: all any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.6.3-4+deb8u2
o-o-sec: 0.6.3-4+deb8u4
oldstable: 0.7.3-2+deb9u2
old-sec: 0.7.3-2+deb9u3
old-bpo: 0.8.1-1~bpo9+1
stable: 0.8.7-1+deb10u1
testing: 0.9.4-1
unstable: 0.9.4-1

versioned links

0.6.3-4+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.6.3-4+deb8u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.7.3-2+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.7.3-2+deb9u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.8.1-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.8.7-1+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libssh-4 (2 bugs: 0, 2, 0, 0)
libssh-dev
libssh-doc
libssh-gcrypt-4
libssh-gcrypt-dev

action needed

A new upstream version is available: 0.9.5 high

A new upstream version 0.9.5 is available, you should consider packaging it.

Created: 2020-09-12 Last update: 2020-10-24 07:01

lintian reports 1 error high

Lintian reports 1 error about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-09-21 06:03

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2020-16135: libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

Please fix it.

Created: 2020-07-30 Last update: 2020-08-07 06:08

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2020-16135: libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

Please fix it.

Created: 2020-07-30 Last update: 2020-08-07 06:08

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

libssh-doc could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2020-10-24 08:05

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2019-14889: A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.

Please fix it.

Created: 2019-12-10 Last update: 2020-08-07 06:08

2 ignored security issues in buster low

There are 2 open security issues in buster.

2 issues skipped by the security teams:

CVE-2019-14889: A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.
CVE-2020-16135: libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

Please fix them.

Created: 2019-12-10 Last update: 2020-08-07 06:08

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2018-06-08 Last update: 2018-11-21 23:59

testing migrations

This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[2020-07-31] Accepted libssh 0.7.3-2+deb9u3 (source amd64 all) into oldstable (Markus Koschany)
[2020-05-01] Accepted libssh 0.8.7-1+deb10u1 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Laurent Bigonville)
[2020-04-14] libssh 0.9.4-1 MIGRATED to testing (Debian testing watch)
[2020-04-09] Accepted libssh 0.9.4-1 (source) into unstable (Laurent Bigonville)
[2019-12-18] libssh 0.9.3-2 MIGRATED to testing (Debian testing watch)
[2019-12-17] Accepted libssh 0.6.3-4+deb8u4 (source amd64 all) into oldoldstable (Emilio Pozuelo Monfort)
[2019-12-15] Accepted libssh 0.9.3-2 (source) into unstable (Laurent Bigonville)
[2019-12-15] Accepted libssh 0.9.3-1 (source) into unstable (Laurent Bigonville)
[2019-07-13] libssh 0.9.0-1 MIGRATED to testing (Debian testing watch)
[2019-07-11] Accepted libssh 0.9.0-1 (source) into unstable (Laurent Bigonville)
[2019-05-26] libssh 0.8.7-1 MIGRATED to testing (Debian testing watch)
[2019-05-23] Accepted libssh 0.8.7-1 (source) into unstable (Martin Pitt)
[2019-02-22] libssh 0.8.6-3 MIGRATED to testing (Debian testing watch)
[2019-02-11] Accepted libssh 0.8.6-3 (source) into unstable (Martin Pitt)
[2019-01-21] libssh 0.8.6-2 MIGRATED to testing (Debian testing watch)
[2019-01-15] Accepted libssh 0.8.6-2 (source) into unstable (Martin Pitt)
[2019-01-03] Accepted libssh 0.7.3-2+deb9u2 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-01-03] libssh 0.8.6-1 MIGRATED to testing (Debian testing watch)
[2018-12-29] Accepted libssh 0.8.6-1 (source amd64 all) into unstable (Laurent Bigonville)
[2018-11-26] libssh 0.8.5-1 MIGRATED to testing (Debian testing watch)
[2018-11-21] Accepted libssh 0.8.5-1 (source amd64 all) into unstable (Laurent Bigonville)
[2018-10-22] libssh 0.8.4-3 MIGRATED to testing (Debian testing watch)
[2018-10-20] Accepted libssh 0.7.3-2+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2018-10-18] Accepted libssh 0.6.3-4+deb8u3 (source amd64 all) into oldstable (Ben Hutchings)
[2018-10-17] Accepted libssh 0.7.3-2+deb9u1 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2018-10-17] Accepted libssh 0.8.4-3 (source amd64 all) into unstable (Laurent Bigonville)
[2018-10-16] Accepted libssh 0.8.4-2 (source amd64 all) into unstable (Laurent Bigonville)
[2018-10-16] Accepted libssh 0.8.4-1 (source amd64 all) into unstable (Laurent Bigonville)
[2018-09-04] Accepted libssh 0.8.1-1~bpo9+1 (source) into stretch-backports (Matteo F. Vescovi)
[2018-08-20] libssh 0.8.1-1 MIGRATED to testing (Debian testing watch)

1
2

bugs [bug history graph]

all: 4
RC: 0
I&N: 4
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (1, 0)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.9.4-1ubuntu3
3 bugs
patches for 0.9.4-1ubuntu3

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing