ELSA-2015-2140

ELSA-2015-2140 - libssh2 security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2015-11-23

Description

[1.4.3-10]
- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)

[1.4.3-9]
- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)

Related CVEs

CVE-2015-1782

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	libssh2-1.4.3-10.el7.src.rpm	7994109b621bb0c9fd5b303b6d8ef22b05ade3807eb8e82b456ce0c2b5c6784e	ELSA-2023-5615	ol7_x86_64_latest_archive
	libssh2-1.4.3-10.el7.src.rpm	7994109b621bb0c9fd5b303b6d8ef22b05ade3807eb8e82b456ce0c2b5c6784e	ELSA-2023-5615	ol7_x86_64_optional_archive
	libssh2-1.4.3-10.el7.src.rpm	7994109b621bb0c9fd5b303b6d8ef22b05ade3807eb8e82b456ce0c2b5c6784e	ELSA-2023-5615	ol7_x86_64_u2_base
	libssh2-1.4.3-10.el7.i686.rpm	4533f83c1a731809ec271ccd8ef803ba8b92c4454476887a8db1fdca38bd5d2d	ELSA-2023-5615	ol7_x86_64_latest_archive
	libssh2-1.4.3-10.el7.i686.rpm	4533f83c1a731809ec271ccd8ef803ba8b92c4454476887a8db1fdca38bd5d2d	ELSA-2023-5615	ol7_x86_64_u2_base
	libssh2-1.4.3-10.el7.x86_64.rpm	30d7efefaed891a0703361ea43629d01bd917dc205dfea9ba7bd6e143175b60f	ELSA-2023-5615	ol7_x86_64_latest_archive
	libssh2-1.4.3-10.el7.x86_64.rpm	30d7efefaed891a0703361ea43629d01bd917dc205dfea9ba7bd6e143175b60f	ELSA-2023-5615	ol7_x86_64_u2_base
	libssh2-devel-1.4.3-10.el7.i686.rpm	5c984bd8f40dbbac5487b984bb53be00ec39d7acbf3af5f040cd671f66318440	ELSA-2023-5615	ol7_x86_64_optional_archive
	libssh2-devel-1.4.3-10.el7.x86_64.rpm	356a1ab223e4800ad8dca279cc9234b9c9069ee1dae71c03eff6429d1eadc4ff	ELSA-2023-5615	ol7_x86_64_optional_archive
	libssh2-docs-1.4.3-10.el7.noarch.rpm	de6f302360e2363654a5984ad405c1133f0219a0b1aefcf99599ad075cc5d756	ELSA-2023-5615	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team