[Buildroot] [PATCH] package/libssh: security bump to version 0.9.4

Thomas Petazzoni thomas.petazzoni at bootlin.com
Mon Apr 13 19:57:00 UTC 2020


On Mon, 13 Apr 2020 17:47:24 +0300
Baruch Siach <baruch at tkos.co.il> wrote:

> Fixes CVE-2020-1730: Possible DoS in client and server when handling
> AES-CTR keys with OpenSSL.
> 
> Format hash file with two spaces delimiter.
> 
> Cc: Scott Fan <fancp2007 at gmail.com>
> Signed-off-by: Baruch Siach <baruch at tkos.co.il>
> ---
>  package/libssh/libssh.hash | 4 ++--
>  package/libssh/libssh.mk   | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com



More information about the buildroot mailing list