libssh: Arbitrary code execution

libssh: Arbitrary code execution Multiple vulnerabilities have been found in libssh, allowing attackers to execute arbitrary code or cause Denial of Service. libssh February 21, 2014 February 21, 2014: 1 444147 remote 0.5.3 0.5.3

libssh is a C library providing SSHv2 and SSHv1.

Multiple buffer overflow, double free, and integer overflow vulnerabilities have been discovered in libssh.

A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

There is no known workaround at this time.

All libssh users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.5.3"

CVE-2012-4559 CVE-2012-4560 CVE-2012-4561 CVE-2012-4562 CVE-2012-6063 ackle ackle