A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
{ "binaries": [ { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-4" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-4-dbgsym" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-dbg" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-dev" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-dev-dbgsym" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-doc" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-gcrypt-4" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-gcrypt-4-dbgsym" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-gcrypt-dev" }, { "binary_version": "0.6.3-4.3ubuntu0.6+esm2", "binary_name": "libssh-gcrypt-dev-dbgsym" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4", "binary_name": "libssh-4" }, { "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4", "binary_name": "libssh-4-dbgsym" }, { "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4", "binary_name": "libssh-dev" }, { "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4", "binary_name": "libssh-doc" }, { "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4", "binary_name": "libssh-gcrypt-4" }, { "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4", "binary_name": "libssh-gcrypt-4-dbgsym" }, { "binary_version": "0.8.0~20170825.94fa1e38-1ubuntu0.7+esm4", "binary_name": "libssh-gcrypt-dev" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "0.9.3-2ubuntu2.5+esm1", "binary_name": "libssh-4" }, { "binary_version": "0.9.3-2ubuntu2.5+esm1", "binary_name": "libssh-4-dbgsym" }, { "binary_version": "0.9.3-2ubuntu2.5+esm1", "binary_name": "libssh-dev" }, { "binary_version": "0.9.3-2ubuntu2.5+esm1", "binary_name": "libssh-doc" }, { "binary_version": "0.9.3-2ubuntu2.5+esm1", "binary_name": "libssh-gcrypt-4" }, { "binary_version": "0.9.3-2ubuntu2.5+esm1", "binary_name": "libssh-gcrypt-4-dbgsym" }, { "binary_version": "0.9.3-2ubuntu2.5+esm1", "binary_name": "libssh-gcrypt-dev" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_version": "0.9.6-2ubuntu0.22.04.4", "binary_name": "libssh-4" }, { "binary_version": "0.9.6-2ubuntu0.22.04.4", "binary_name": "libssh-4-dbgsym" }, { "binary_version": "0.9.6-2ubuntu0.22.04.4", "binary_name": "libssh-dev" }, { "binary_version": "0.9.6-2ubuntu0.22.04.4", "binary_name": "libssh-doc" }, { "binary_version": "0.9.6-2ubuntu0.22.04.4", "binary_name": "libssh-gcrypt-4" }, { "binary_version": "0.9.6-2ubuntu0.22.04.4", "binary_name": "libssh-gcrypt-4-dbgsym" }, { "binary_version": "0.9.6-2ubuntu0.22.04.4", "binary_name": "libssh-gcrypt-dev" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "0.10.6-2ubuntu0.1", "binary_name": "libssh-4" }, { "binary_version": "0.10.6-2ubuntu0.1", "binary_name": "libssh-4-dbgsym" }, { "binary_version": "0.10.6-2ubuntu0.1", "binary_name": "libssh-dev" }, { "binary_version": "0.10.6-2ubuntu0.1", "binary_name": "libssh-doc" }, { "binary_version": "0.10.6-2ubuntu0.1", "binary_name": "libssh-gcrypt-4" }, { "binary_version": "0.10.6-2ubuntu0.1", "binary_name": "libssh-gcrypt-4-dbgsym" }, { "binary_version": "0.10.6-2ubuntu0.1", "binary_name": "libssh-gcrypt-dev" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "0.11.1-1ubuntu0.1", "binary_name": "libssh-4" }, { "binary_version": "0.11.1-1ubuntu0.1", "binary_name": "libssh-4-dbgsym" }, { "binary_version": "0.11.1-1ubuntu0.1", "binary_name": "libssh-dev" }, { "binary_version": "0.11.1-1ubuntu0.1", "binary_name": "libssh-doc" } ], "availability": "No subscription required" }