Debian Security Advisory

DLA-1730-2 libssh2 -- LTS security update

Date Reported:
08 Apr 2019
Affected Packages:
Security database references:
In Mitre's CVE dictionary: CVE-2019-3859.
More information:

This regression update follows up on an upstream regression update [1] regarding CVE-2019-3859.

With the previous libssh2 package revision, it was observed that user authentication with private/public key pairs would fail under certain circumstances.

For Debian 8 Jessie, this problem has been fixed in version 1.4.3-4.1+deb8u3.

We recommend that you upgrade your libssh2 packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: