Skip to content
OpenAdvisories
Medium ELSA-2023-3839 2 CVEs

Moderate: libssh security update (Oracle Linux 8)

Published Jun 29, 2023 · Updated Jun 29, 2023

Summary

[0.9.6-10]
- Add missing ci.fmf file
- Related: rhbz#2182251, rhbz#2189742

[0.9.6-9]
- Fix covscan errors found at gating
- Related: rhbz#2182251, rhbz#2189742

[0.9.6-8]
- Backport test fixing commits to make the build pass
- Related: rhbz#2182251, rhbz#2189742

[0.9.6-7]
- Fix NULL dereference during rekeying with algorithm guessing
GHSL-2023-032 / CVE-2023-1667
- Fix possible authentication bypass
GHSL 2023-085 / CVE-2023-2283
- Resolves: rhbz#2182251, rhbz#2189742

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 libssh 0:0.9.6-10.el8_8
Oracle Linux · 8 libssh-config 0:0.9.6-10.el8_8
Oracle Linux · 8 libssh-devel 0:0.9.6-10.el8_8

Vulnerabilities 2

  • Unscored —

    A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authen…

  • Unscored —

    A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki…