starlingx
/
tools
Code Issues Proposed changes

libssh: Upgrade to 0.9.8-0+deb11u1 

Upgrade libssh-4 and libssh-dev to 0.9.8-0+deb11u1 to fix the CVE
issues CVE-2023-6004/CVE-2023-6918/CVE-2023-48795

Refer to:
https://security-tracker.debian.org/tracker/DSA-5591-1
https://nvd.nist.gov/vuln/detail/CVE-2023-6004
https://nvd.nist.gov/vuln/detail/CVE-2023-6918
https://nvd.nist.gov/vuln/detail/CVE-2023-48795

Closes-Bug: 2047673

Change-Id: I03397c7ca51e569b12387c8f86f79dbe0781a1df
Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
This commit is contained in:
Zhixiong Chi 2023-12-28 18:54:16 -08:00
parent 6f6a4cd4e0
commit 29ec4cfeaa
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -662,10 +662,10 @@ libspice-server-dev 0.14.3-2.1
libspice-server1 0.14.3-2.1
libsqlite3-0 3.34.1-3
libss2 1.46.2-2
libssh-dev 0.9.7-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20230523T094002Z/pool/updates/main/libs/libssh/libssh-dev_0.9.7-0%2Bdeb11u1_amd64.deb
libssh-dev 0.9.8-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20231228T223536Z/pool/updates/main/libs/libssh/libssh-dev_0.9.8-0%2Bdeb11u1_amd64.deb
libssh2-1-dev 1.9.0-2
libssh2-1 1.9.0-2
libssh-4 0.9.7-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20230523T094002Z/pool/updates/main/libs/libssh/libssh-4_0.9.7-0%2Bdeb11u1_amd64.deb
libssh-4 0.9.8-0+deb11u1 https://snapshot.debian.org/archive/debian-security/20231228T223536Z/pool/updates/main/libs/libssh/libssh-4_0.9.8-0%2Bdeb11u1_amd64.deb
libssl1.1 1.1.1n-0+deb11u5 https://snapshot.debian.org/archive/debian/20230611T210420Z/pool/main/o/openssl/libssl1.1_1.1.1n-0%2Bdeb11u5_amd64.deb
libssl-dev 1.1.1n-0+deb11u5 https://snapshot.debian.org/archive/debian/20230611T210420Z/pool/main/o/openssl/libssl-dev_1.1.1n-0%2Bdeb11u5_amd64.deb
libsss-certmap0 2.4.1-2