Could you provide us the patch for CVE-2015-1782. A vulnerability has been reported in libssh2, which can be exploited by malicious people to cause a DoS (Denial of Service) or expose sensitive information or manipulate data. The vulnerability is caused due to an error in the "kex_agree_methods()" function (src/kex.c) when handling strings, which can be exploited to cause an out-of-bounds read memory access and a crash via a specially crafted SSH_MSG_KEXINIT packet. http://secunia.com/advisories/63336 http://www.libssh2.org/adv_20150311.html http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1782
