1. Forum
  2. Usenet
  3. LINUX.DEBIAN.CHANGES

  • Accepted libssh 0.9.5-1+deb11u1 (source) into proposed-updates->stable-

    From Debian FTP Masters@21:1/5 to All on Thu Sep 2 21:50:04 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sat, 28 Aug 2021 13:52:11 +0200
    Source: libssh
    Architecture: source
    Version: 0.9.5-1+deb11u1
    Distribution: bullseye-security
    Urgency: high
    Maintainer: Laurent Bigonville <bigon@debian.org>
    Changed-By: Martin Pitt <mpitt@debian.org>
    Closes: 993046
    Changes:
    libssh (0.9.5-1+deb11u1) bullseye-security; urgency=high
    .
    * dh-gex: Avoid memory leaks.
    Add 0001-dh-gex-Avoid-memory-leaks.patch: Backported from upstream 0.9.6
    release.
    * Fix handshake bug with AEAD ciphers and no HMAC overlap.
    Add 0002-Fix-handshake-bug-with-AEAD-ciphers-and-no-HMAC-over.patch and
    0003-Add-initial-server-algorithm-test-for-no-HMAC-overla.patch:
    Backport fix and test from upstream 0.9.6 release.
    * Create a separate length for session_id.
    Add 0004-CVE-2021-3634-Create-a-separate-length-for-session_i.patch and
    0005-tests-Simple-reproducer-for-rekeying-with-different-.patch:
    Backport fix and test from upstream 0.9.6 release.
    CVE-2021-3634 (Closes: #993046)
    Checksums-Sha1:
    c0d2ed5c8eab7d36708add8474d293fc1dfc7aad 2717 libssh_0.9.5-1+deb11u1.dsc
    cac8772e6bea068e4defea067d4290991d566964 502876 libssh_0.9.5.orig.tar.xz
    6d7ec8cce3e6d4fc6a4cb399ea4cd2580e6b0640 833 libssh_0.9.5.orig.tar.xz.asc
    c008b35eb8ddedb82c4871265c1ca67574d5d8fe 34424 libssh_0.9.5-1+deb11u1.debian.tar.xz
    f729f3b7c6856065ea5dad6cc0f88e9c76366dde 7270 libssh_0.9.5-1+deb11u1_source.buildinfo
    Checksums-Sha256:
    7865bc43f9f194547a36eacf86d74e3761f7045652c544479979cddb18a63215 2717 libssh_0.9.5-1+deb11u1.dsc
    acffef2da98e761fc1fd9c4fddde0f3af60ab44c4f5af05cd1b2d60a3fa08718 502876 libssh_0.9.5.orig.tar.xz
    e8b6141b7370ea08f83b5d78233e4ab0789a7dab8a11561accf36fb18544fae7 833 libssh_0.9.5.orig.tar.xz.asc
    b5ab07da2e44689868bea58d9d606269a0b9f8b5773a9916b83b0642f4d472cd 34424 libssh_0.9.5-1+deb11u1.debian.tar.xz
    7b7c0fb5d65df9b9eab48308cd619fb33e093f7bd9c109d00ab291feb4bed04a 7270 libssh_0.9.5-1+deb11u1_source.buildinfo
    Files:
    1034c7c90f57ff4a136b022a7ce99e98 2717 libs optional libssh_0.9.5-1+deb11u1.dsc
    6211e47ba4dfd7f7e9f8a17a601245f4 502876 libs optional libssh_0.9.5.orig.tar.xz
    49564e894ab537b4fdd323dc945ff473 833 libs optional libssh_0.9.5.orig.tar.xz.asc
    2ad34520735156abb83a9536b123f93e 34424 libs optional libssh_0.9.5-1+deb11u1.debian.tar.xz
    d64b7caa61eb6b9c1f07fbb5090a14b9 7270 libs optional libssh_0.9.5-1+deb11u1_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEPbRrVe+lnUDmIyFI0U7xXa/hE0cFAmEsUnoACgkQ0U7xXa/h E0fZFRAAnCb8PsxnvjZ/zleSpC4Q5XIi1/Iob/IJJKRcf8EIuT77EBYQS2OLkTq/ z+IJOomS/S1sFdkcK5Ka9VXV7ONMOaVSnSg8YCzEvU7PXeHHX/8b+Mr2UGOBlpOB fOz5JNNgEe+V5AxIS2aBn+NGu7Um3eJy5jIuPvCrQ2k9fXpiRulX04OmxhZUFMXF 03Ig0B8vqDQrncfNtSBuNQaz2I4d/9Uwgz1GNilOUFu4IXneUvHDdZA9dd6dOqly pOal43hPWkLXPx1nmWyNKT3fD1zHxDqBiwYC4ayPn0bvKoGTUeqBFvrTIxMHg/Ul L7eNl7VFZNZOdHpuDHz41jEY7Z9coV+/XuU67l/zLicd0kZJIAY+pdoVDsMFMJeH /3ETnfQ/aIRqCAwp/pgfRAXlPGqKF5LHT0mEpamC88YwOd6+2o5GJ5Lb9F+MhYPB S0aGTjOdWGaH0Yvq5J/vTb9U2X70n1oKXHGiiWEA5MSawWocticNHsbLJx7wNe03 bGNKyYLVCWQRBxp6o781IjpRQFgZK84lv+D+i+6KG85wx8nbxzl+zvx9Pc2ts1pj xxctHC+bTxv5BOH2fVK/P7vBLpyH6PDK54Hog0TlOs0i76ns1TMULMhzWYQhOYRN jH+oCkAlLLpBRzyPfK4HcaUWVryw41ndqYYNRNdkllQ84haZfl0=
    =0LOJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)