-
Committer:
Package Import Robot
-
Author(s):
Marc Deslauriers
-
Date:
2012-11-22 13:34:54 UTC
-
Revision ID:
package-import@ubuntu.com-20121122133454-dx5fq7yrdhqpv7ad
Tags: 0.5.2-1ubuntu0.12.10.1
* SECURITY UPDATE: denial of service and possible code execution via
multiple double free flaws
- debian/patches/CVE-2012-4559.patch: properly do frees in src/agent.c,
src/channels.c, src/sftp.c.
- CVE-2012-4559
* SECURITY UPDATE: denial of service and possible code execution via
multiple buffer overflows
- debian/patches/CVE-2012-4560.patch: properly calculate sizes in
src/misc.c.
- CVE-2012-4560
* SECURITY UPDATE: denial of service and possible code execution via
multiple invalid free flaws
- debian/patches/CVE-2012-4561.patch: don't use after free in
src/keyfiles.c, properly zero structs in src/keys.c.
- CVE-2012-4561
* SECURITY UPDATE: denial of service and possible code execution via
multiple improper overflow checks
- debian/patches/CVE-2012-4562.patch: do proper overflow checks in
src/buffer.c, src/dh.c, src/string.c.
- CVE-2012-4562