-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 28 Aug 2021 13:52:11 +0200
Source: libssh
Binary: libssh-doc
Architecture: all
Version: 0.9.5-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Description:
 libssh-doc - tiny C SSH library - Documentation files
Closes: 993046
Changes:
 libssh (0.9.5-1+deb11u1) bullseye-security; urgency=high
 .
   * dh-gex: Avoid memory leaks.
     Add 0001-dh-gex-Avoid-memory-leaks.patch: Backported from upstream 0.9.6
     release.
   * Fix handshake bug with AEAD ciphers and no HMAC overlap.
     Add 0002-Fix-handshake-bug-with-AEAD-ciphers-and-no-HMAC-over.patch and
     0003-Add-initial-server-algorithm-test-for-no-HMAC-overla.patch:
     Backport fix and test from upstream 0.9.6 release.
   * Create a separate length for session_id.
     Add 0004-CVE-2021-3634-Create-a-separate-length-for-session_i.patch and
     0005-tests-Simple-reproducer-for-rekeying-with-different-.patch:
     Backport fix and test from upstream 0.9.6 release.
     CVE-2021-3634 (Closes: #993046)
Checksums-Sha1:
 54ffbe62b6cfd394d12634ab8b85cc695e099387 9283864 libssh-doc_0.9.5-1+deb11u1_all.deb
 9da400012e1036632ade1165a21e4ce10f1942a2 8887 libssh_0.9.5-1+deb11u1_all-buildd.buildinfo
Checksums-Sha256:
 1c6b999c2d16742a4c510fe6bd2ae4b3769eadd739eca3429d3f41028d6162b7 9283864 libssh-doc_0.9.5-1+deb11u1_all.deb
 742280d7e18d7721b8b58ff9e6e476144163a729094d0cb96d7c2c81a5dffeb8 8887 libssh_0.9.5-1+deb11u1_all-buildd.buildinfo
Files:
 990f8b5121c0edaeae8a48031c77114e 9283864 doc optional libssh-doc_0.9.5-1+deb11u1_all.deb
 d964d8a0fac09f2f83c78590eae02a53 8887 libs optional libssh_0.9.5-1+deb11u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=xdAt
-----END PGP SIGNATURE-----