Medium ELSA-2019-1884 1 CVE

Moderate: libssh2 security update (Oracle Linux 7)

Published Jul 30, 2019 · Updated Jul 30, 2019

Ecosystem: Oracle Linux

Summary

[1.4.3-12.0.1.el7_6.3]
- Bump and rebuild.

[1.4.3-12.el7_6.3]
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libssh2	0:1.4.3-12.0.1.el7_6.3
Oracle Linux · 7	libssh2-devel	0:1.4.3-12.0.1.el7_6.3
Oracle Linux · 7	libssh2-docs	0:1.4.3-12.0.1.el7_6.3

Vulnerabilities 1

High 7.3

CVE-2019-3862

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an ex…

The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine

Mar 20, 2019