Skip to content
OpenAdvisories
Medium ELSA-2020-4545 2 CVEs

Moderate: libssh security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Summary

[0.9.4-2]
- Do not return error when server properly closed the channel (#1849071)
- Add a test for CVE-2019-14889
- Do not parse configuration file in torture_knownhosts test

[0.9.4-1]
- Update to version 0.9.4
https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
- Fixed CVE-2019-14889 (#1781782)
- Fixed CVE-2020-1730 (#1802422)
- Create missing directories in the path provided for known_hosts files (#1733914)
- Removed inclusion of OpenSSH server configuration file from
libssh_server.config (#1821339)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 libssh 0:0.9.4-2.el8
Oracle Linux · 8 libssh-config 0:0.9.4-2.el8
Oracle Linux · 8 libssh-devel 0:0.9.4-2.el8

Vulnerabilities 2