Red Hat Security Advisory: libssh2 security update

Fixed packages 8

Vulnerabilities 4

• High 7.5
  CVE-2019-3855

  An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way p…

  The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  Mar 21, 2019
• High 7.5
  CVE-2019-3856

  An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way…

  The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  Mar 25, 2019
• High 7.5
  CVE-2019-3857

  An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way S…

  The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  Mar 25, 2019
• High 7.5
  CVE-2019-3863

  A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multipl…

  The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  Mar 25, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1687303
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1687304
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1687305
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1687313
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1791.json
• report
  https://access.redhat.com/security/cve/CVE-2019-3855
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3855
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3855
• article
  https://www.libssh2.org/CVE-2019-3855.html
• report
  https://access.redhat.com/security/cve/CVE-2019-3856
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3856
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3856
• article
  https://www.libssh2.org/CVE-2019-3856.html
• report
  https://access.redhat.com/security/cve/CVE-2019-3857
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3857
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3857
• article
  https://www.libssh2.org/CVE-2019-3857.html
• report
  https://access.redhat.com/security/cve/CVE-2019-3863
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-3863
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-3863
• article
  https://www.libssh2.org/CVE-2019-3863.html