Medium ELSA-2023-6643 2 CVEs

Moderate: libssh security update (Oracle Linux 9)

Published Nov 11, 2023 · Updated Nov 11, 2023

Ecosystem: Oracle Linux

Summary

[0.10.4-11]
- Fix loglevel regression
- Related: rhbz#2182252, rhbz#2189740

[0.10.4.10]
- Fix null dereference issues found by covscan
- Related: rhbz#2182252, rhbz#2189740

[0.10.4-9]
- Fix CVE-2023-1667 and CVE-2023-2283
- Fix issues found by cosvcan
- Resolves: rhbz#2182252, rhbz#2189740

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	libssh	0:0.10.4-11.el9
Oracle Linux · 9	libssh-config	0:0.10.4-11.el9
Oracle Linux · 9	libssh-devel	0:0.10.4-11.el9

Vulnerabilities 2

Unscored —

CVE-2023-1667

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authen…

libssh libssh Debian Ubuntu

May 26, 2023
Unscored —

CVE-2023-2283

A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki…

libssh libssh Debian Ubuntu

May 26, 2023