Skip to content
OpenAdvisories
High ALAS2-2023-2257 1 CVE

Important: libssh2 security update (Amazon Linux 2)

Published Sep 13, 2023 · Updated Sep 20, 2023

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-22218: An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 libssh2 0:1.4.3-12.amzn2.2.6
Amazon Linux · 2 libssh2-debuginfo 0:1.4.3-12.amzn2.2.6
Amazon Linux · 2 libssh2-devel 0:1.4.3-12.amzn2.2.6
Amazon Linux · 2 libssh2-docs 0:1.4.3-12.amzn2.2.6

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-22218.html