libssh2 - Debian Package Tracker

general

source: libssh2 (main)
version: 1.10.0-2
maintainer: Nicolas Mora (DMD)
arch: any
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.7.0-1+deb9u1
o-o-sec: 1.7.0-1+deb9u1
oldstable: 1.8.0-2.1
stable: 1.9.0-2
testing: 1.10.0-2
unstable: 1.10.0-2

versioned links

1.7.0-1+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.8.0-2.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.9.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.10.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libssh2-1 (2 bugs: 0, 2, 0, 0)
libssh2-1-dev

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

unknown protocol for LWP: pgpmode=auto

Created: 2020-06-29 Last update: 2021-12-03 23:06

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 47aa5201a7c1e8a712762f7083f6fcbfe3dfe019
Author: Nicolas Mora <nicolas@babelouest.org>
Date:   Sun Sep 26 11:07:28 2021 -0400

    Update d/watch for new website

commit 4b14847f469a5afce2dc7a6dbab27c24045c67de
Author: Nicolas Mora <nicolas@babelouest.org>
Date:   Sat Sep 25 09:05:15 2021 -0400

    Upgrade to 1.10.0-2

Created: 2021-09-25 Last update: 2021-12-02 19:35

2 low-priority security issues in buster low

There are 2 open security issues in buster.

2 issues left for the package maintainer to handle:

CVE-2019-13115: (needs triaging) In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.
CVE-2019-17498: (needs triaging) In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

You can find information about how to handle these issues in the security team's documentation.

Created: 2021-02-19 Last update: 2021-09-27 11:30

testing migrations

This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2021-09-28] libssh2 1.10.0-2 MIGRATED to testing (Debian testing watch)
[2021-09-25] Accepted libssh2 1.10.0-2 (source) into unstable (Nicolas Mora)
[2021-09-01] Accepted libssh2 1.10.0-1 (source) into experimental (Nicolas Mora)
[2021-08-16] libssh2 1.9.0-3 MIGRATED to testing (Debian testing watch)
[2021-03-27] Accepted libssh2 1.9.0-3 (source) into unstable (Nicolas Mora)
[2020-12-17] libssh2 1.9.0-2 MIGRATED to testing (Debian testing watch)
[2020-12-14] Accepted libssh2 1.9.0-2 (source) into unstable (Nicolas Mora)
[2020-12-14] libssh2 1.9.0-1 MIGRATED to testing (Debian testing watch)
[2020-12-07] Accepted libssh2 1.9.0-1 (source) into unstable (Nicolas Mora)
[2019-11-13] Accepted libssh2 1.4.3-4.1+deb8u6 (source amd64) into oldoldstable (Abhijith PA)
[2019-07-30] Accepted libssh2 1.4.3-4.1+deb8u5 (source) into oldoldstable (Mike Gabriel)
[2019-07-25] Accepted libssh2 1.4.3-4.1+deb8u4 (source amd64) into oldoldstable (Mike Gabriel)
[2019-04-14] Accepted libssh2 1.7.0-1+deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-04-13] Accepted libssh2 1.7.0-1+deb9u1 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2019-04-05] libssh2 1.8.0-2.1 MIGRATED to testing (Debian testing watch)
[2019-04-03] Accepted libssh2 1.8.0-2.1 (source) into unstable (Salvatore Bonaccorso)
[2019-04-02] Accepted libssh2 1.4.3-4.1+deb8u3 (source amd64) into oldstable (Mike Gabriel)
[2019-03-26] Accepted libssh2 1.4.3-4.1+deb8u2 (source amd64) into oldstable (Mike Gabriel)
[2018-07-30] libssh2 1.8.0-2 MIGRATED to testing (Debian testing watch)
[2018-07-19] Accepted libssh2 1.8.0-2 (source amd64) into unstable (Mikhail Gusarov)
[2017-06-20] libssh2 1.8.0-1 MIGRATED to testing (Debian testing watch)
[2017-03-16] Accepted libssh2 1.8.0-1 (source amd64) into unstable (Mikhail Gusarov)
[2016-08-02] libssh2 1.7.0-1 MIGRATED to testing (Debian testing watch)
[2016-07-22] Accepted libssh2 1.7.0-1 (source i386) into unstable (Mikhail Gusarov)
[2016-03-05] libssh2 1.5.0-2.1 MIGRATED to testing (Debian testing watch)
[2016-02-28] Accepted libssh2 1.5.0-2.1 (source) into unstable (Salvatore Bonaccorso)
[2016-02-24] Accepted libssh2 1.4.2-1.1+deb7u2 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Salvatore Bonaccorso)
[2016-02-24] Accepted libssh2 1.4.3-4.1+deb8u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-02-23] Accepted libssh2 1.2.6-1+deb6u2 (amd64 i386 source) into squeeze-lts (Ben Hutchings)
[2015-04-27] libssh2 1.5.0-2 MIGRATED to testing (Britney)

bugs [bug history graph]

all: 3
RC: 0
I&N: 2
M&W: 1
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.10.0-2
5 bugs