File _patchinfo of Package patchinfo.484
<patchinfo incident="484">
<issue id="921070" tracker="bnc">VUL-0: EMBARGOED: CVE-2015-1782: libssh2_org: Using SSH_MSG_KEXINIT data unbounded</issue>
<issue id="CVE-2015-1782" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>vitezslav_cizek</packager>
<description>
The ssh client library libssh2_org was updated to fix a security issue.
CVE-2015-1782: A malicious server could send a crafted SSH_MSG_KEXINIT
packet, that could lead to a buffer overread and to a crash of the
libssh2_org using application.
</description>
<summary>Security update for libssh2_org</summary>
</patchinfo>