~ubuntu-branches/ubuntu/quantal/libssh/quantal-updates

Viewing all changes in revision 21.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2012-11-22 13:34:54 UTC
  • Revision ID: package-import@ubuntu.com-20121122133454-dx5fq7yrdhqpv7ad
Tags: 0.5.2-1ubuntu0.12.10.1
* SECURITY UPDATE: denial of service and possible code execution via
  multiple double free flaws
  - debian/patches/CVE-2012-4559.patch: properly do frees in src/agent.c,
    src/channels.c, src/sftp.c.
  - CVE-2012-4559
* SECURITY UPDATE: denial of service and possible code execution via
  multiple buffer overflows
  - debian/patches/CVE-2012-4560.patch: properly calculate sizes in
    src/misc.c.
  - CVE-2012-4560
* SECURITY UPDATE: denial of service and possible code execution via
  multiple invalid free flaws
  - debian/patches/CVE-2012-4561.patch: don't use after free in
    src/keyfiles.c, properly zero structs in src/keys.c.
  - CVE-2012-4561
* SECURITY UPDATE: denial of service and possible code execution via
  multiple improper overflow checks
  - debian/patches/CVE-2012-4562.patch: do proper overflow checks in
    src/buffer.c, src/dh.c, src/string.c.
  - CVE-2012-4562

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: