Red Hat Security Advisory: libssh security, bug fix, and enhancement update

Fixed packages 7

Vulnerabilities 2

• High 7.1
  CVE-2019-14889

  A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh …

  Red Hat libssh libssh libssh Debian Ubuntu Alpine
  Dec 10, 2019
• Medium 5.3
  CVE-2020-1730

  A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enab…

  Red Hat libssh libssh libssh Debian Ubuntu Alpine
  Apr 13, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1733914
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1772523
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1801998
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1804797
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1821339
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1849071
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4545.json
• report
  https://access.redhat.com/security/cve/CVE-2019-14889
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-14889
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-14889
• article
  https://www.libssh.org/security/advisories/CVE-2019-14889.txt
• report
  https://access.redhat.com/security/cve/CVE-2020-1730
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-1730
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-1730
• article
  https://www.libssh.org/security/advisories/CVE-2020-1730.txt