Page MenuHomeSolus

Update libssh2 to 1.8.1
ClosedPublic

Authored by kyrios123 on Mar 20 2019, 5:44 PM.
Tags
None
Referenced Files
F11070518: D5796.diff
Sat, Aug 12, 12:28 AM
F11020608: D5796.id13952.diff
Mon, Aug 7, 7:15 AM
F10942792: D5796.id13952.diff
Fri, Jul 14, 2:14 PM
F10889046: D5796.id13952.diff
Jun 27 2023, 12:43 PM
F10888727: D5796.id13998.diff
Jun 27 2023, 7:07 AM
F10885068: D5796.diff
Jun 25 2023, 6:59 AM
Subscribers
None

Details

Summary
  • fixed possible integer overflow when reading a specially crafted packet
  • fixed possible integer overflow in userauth_keyboard_interactive with a number of extremely long prompt strings
  • fixed possible integer overflow if the server sent an extremely large number of keyboard prompts
  • fixed possible out of bounds read when processing a specially crafted packet
  • fixed possible integer overflow when receiving a specially crafted exit signal message channel packet
  • fixed possible out of bounds read when receiving a specially crafted exit status message channel packet
  • fixed possible zero byte allocation when reading a specially crafted SFTP packet
  • fixed possible out of bounds reads when processing specially crafted SFTP packets
  • fixed possible out of bounds reads in _libssh2_packet_require(v)

Resolves T7719

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan
  • Unit tests enabled
  • curl -u user sftp://192.168.1.31/inout

Diff Detail

Repository
R1862 libssh2
Branch
master
Lint
No Lint Coverage
Unit
No Test Coverage

Event Timeline

This revision is now accepted and ready to land.Mar 22 2019, 11:26 AM
This revision was automatically updated to reflect the committed changes.