[CLSA-2023:1695835334] Fix CVE(s): CVE-2020-22218
Type:
security
Severity:
Important
Release date:
2023-09-27 17:22:18 UTC
Description:
* SECURITY UPDATE: An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. - debian/patches/CVE-2020-22218.patch: doing total_num zero length check. - CVE-2020-22218
Updated packages:
  • libssh2-1_1.5.0-2ubuntu0.1+tuxcare.els1_amd64.deb
    sha:405f6549c610c2054c34ca0b47c816215a016b11
  • libssh2-1-dev_1.5.0-2ubuntu0.1+tuxcare.els1_amd64.deb
    sha:47084654283644b76c95ee44c1a5fcc3b77a23cd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.