[Debian] High CVE: CVE-2020-22218 libssh2

[Yue Tao]

CVE-2020-22218: https://nvd.nist.gov/vuln/detail/CVE-2020-22218

An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.

Base Score: High

Reference:

['libssh2-1-dev_1.9.0-2_amd64.deb===>libssh2-1-dev_1.9.0-2+deb11u1_amd64.deb', 'libssh2-1_1.9.0-2_amd64.deb===>libssh2-1_1.9.0-2+deb11u1_amd64.deb']

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/tools/+/924040

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/tools/+/924040
Committed: https://opendev.org/starlingx/tools/commit/0eb294cce207b4826ba541837c4689461667e85e
Submitter: "Zuul (22348)"
Branch: master

commit 0eb294cce207b4826ba541837c4689461667e85e
Author: Peng Zhang <email address hidden>
Date: Wed Jul 10 03:30:47 2024 +0000

    Debian: libssh2: fix CVE-2020-22218

    Upgrade libssh2-1-dev to 1.9.0-2+deb11u1
    Upgrade libssh2-1 to 1.9.0-2+deb11u1

    Refer to:
    https://nvd.nist.gov/vuln/detail/CVE-2020-22218

    TestPlan:
    PASS: downloader; build-pkgs
    PASS: build-image

    Closes-Bug: 2071585
    Change-Id: Id9810b55180d8cfd9c5481263291f9b8d2bb0b70
    Signed-off-by: Peng Zhang <email address hidden>