Lucene search

K
oraclelinuxOracleLinuxELSA-2019-1652
HistoryJul 02, 2019 - 12:00 a.m.

libssh2 security update

2019-07-0200:00:00
linux.oracle.com
150

0.015 Low

EPSS

Percentile

86.8%

[1.4.2-3.0.1.el6_10.1]

  • [Orabug: 29909723] Added patch CVE-2019-3862. ([email protected])
    Added Additional length checks to prevent out-of-bounds (CVE-2019-3862)
    [1.4.2-3.el6_10.1]
  • fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  • fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  • fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  • fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)
  • use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)