libssh2-1.4.3-12.el7.3

The libssh2 packages provide a library that implements the SSH2 protocol.

Security Fix(es):

* libssh2: Out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2019-3862
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.