Medium ELSA-2016-0428 1 CVE

Moderate: libssh2 security update (Oracle Linux 7)

Published Mar 10, 2016 · Updated Mar 10, 2016

Ecosystem: Oracle Linux

Summary

[1.4.2-2.el6_7.1]
- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)

[1.4.2-2]
- fix basic functionality of libssh2 in FIPS mode (#968575)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libssh2	0:1.4.3-10.el7_2.1
Oracle Linux · 7	libssh2-devel	0:1.4.3-10.el7_2.1
Oracle Linux · 7	libssh2-docs	0:1.4.3-10.el7_2.1

Vulnerabilities 1

Unscored —

CVE-2016-0787

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, wh…

libssh2 libssh2 libssh2 Debian Ubuntu Alpine

Apr 13, 2016