ELSA-2019-4692 — Important: libssh2 security update (Oracle Linux 7)

Summary

[1.4.3-12.0.1.el7_6.2]
- [Orabug: 29909723] Added patch CVE-2019-3862
added length checks to prevent out-of-bounds reads and writes in _libssh2_packet_add()(CVE-2019-3862)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libssh2	0:1.4.3-12.0.1.el7_6.2
Oracle Linux · 7	libssh2-devel	0:1.4.3-12.0.1.el7_6.2
Oracle Linux · 7	libssh2-docs	0:1.4.3-12.0.1.el7_6.2

Vulnerabilities 1

High 7.3

CVE-2019-3862

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an ex…

The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine

Mar 20, 2019

Important: libssh2 security update (Oracle Linux 7)

Summary

Fixed packages 3

Vulnerabilities 1

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an ex…