Summary
[0.9.6-3]
- Remove STI tests
[0.9.6-2]
- Remove bad patch causing errors
- Adding BuildRequires for openssh (SSHD support)
[0.9.6-1]
- Fix CVE-2021-3634: Fix possible heap-buffer overflow when
rekeying with different key exchange mechanism
- Rebase to version 0.9.6
- Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c
- Resolves: rhbz#1896651, rhbz#1994600
[0.9.4-4]
- Revert previous commit as it is incorrect.
[0.9.6-1]
- Fix CVE-2021-3634: Fix possible heap-buffer overflow when
rekeying with different key exchange mechanism (#1978810)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libssh | 0:0.9.6-3.el8 |
| Oracle Linux · 8 | libssh-config | 0:0.9.6-3.el8 |
| Oracle Linux · 8 | libssh-devel | 0:0.9.6-3.el8 |
Vulnerabilities 1
-
Unscored —
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during t…