]> git.ipfire.org Git - ipfire-2.x.git/commit
libssh: Update to version 0.11.3
authorAdolf Belka <adolf.belka@ipfire.org>
Mon, 15 Sep 2025 17:46:27 +0000 (19:46 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 16 Sep 2025 08:47:57 +0000 (08:47 +0000)
commit2b4ca744b03f828297bde50e43f40abbf146b64f
treec018d09c10e1d135507cda66764f70f664086ac8
parent3063559e4fa15e3058f2e62d8df617fae4a92e69
libssh: Update to version 0.11.3

- Update from version 0.11.2 to 0.11.3
- Update of rootfile
- Changelog
    0.11.3
 * Security:
   * CVE-2025-8114: Fix NULL pointer dereference after allocation failure
   * CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated
wrong KEX
   * Potential UAF when send() fails during key exchange
 * Fix possible timeout during KEX if client sends authentication too early (#311)
 * Cleanup OpenSSL PKCS#11 provider when loaded
 * Zeroize buffers containing private key blobs during export

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/rootfiles/common/libssh
lfs/libssh