Summary
[1.4.3-10]
- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)
[1.4.3-9]
- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libssh2 | 0:1.4.3-10.el7 |
| Oracle Linux · 7 | libssh2-devel | 0:1.4.3-10.el7 |
| Oracle Linux · 7 | libssh2-docs | 0:1.4.3-10.el7 |
Vulnerabilities 1
-
Unscored —
The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or ha…