3 ms·

All of the CVEs give credit to "Chris Coulson of Canonical Ltd.". Nice job Chris. Looks like they've probably developed a fuzzer targeting client packet handlin

All of the CVEs give credit to "Chris Coulson of Canonical Ltd.". Nice job Chris. Looks like they've probably developed a fuzzer targeting client packet handling. I wouldn't be surprised if we see more bugs pop up as a result of this attention.

WestCoastJustin 8y ago
Nice catch. Didn't see that. Thanks for posting that. Yeah, pretty amazing these bugs are still kicking around even for something that has been looked at pretty critically. Makes this even more impressive.
- justincormack 8y ago
  Libssh2 has not been looked at critically. Are you mixing it up with openssh? Its sadly neglected although with a slight pickup as it did a release to fix 9 CVEs. There will be many more.
dsl 8y ago
Bugs coming out of Canonical and Red Hat are usually the result of customer issues. When I worked for a big company we reported the things we found to Red Hat as part of our enterprise support and they investigated and disclosed to the author.
- deleted 8y ago
  [deleted]