[Bug 1968334] Re: Fix CVE-2019-13115

[Nishit Majithia]

** Changed in: libssh2 (Ubuntu Focal)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libssh2 in Ubuntu.
https://bugs.launchpad.net/bugs/1968334

Title:
  Fix CVE-2019-13115

Status in libssh2 package in Ubuntu:
  Fix Released
Status in libssh2 source package in Bionic:
  New
Status in libssh2 source package in Focal:
  Won't Fix

Bug description:
  As per CVE-2019-13115 (https://ubuntu.com/security/CVE-2019-13115) and
  GitHub security protocol improvement
  (https://github.blog/2021-09-01-improving-git-protocol-security-
  github/), libssh2 should be upgraded at least to 1.9.0: when it will
  be done at least for LTS versions?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libssh2/+bug/1968334/+subscriptions