[ALSA-2023:3839] Moderate: libssh security update
Type:
security
Severity:
moderate
Release date:
2023-06-30
Description:
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667) * libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libssh-devel-0.9.6-10.el8_8.aarch64.rpm 344b113499ce9e9930e7a54121e42fc42ceaea7bc584ceeed3867b3eb8948a6f
aarch64 libssh-0.9.6-10.el8_8.aarch64.rpm f7dff6c69bbfe0d992b25a8088fbb63a457419e1748c14b614969fe82e86e743
i686 libssh-0.9.6-10.el8_8.i686.rpm 3b441f120dc064f00de3da633725f62be7c720fc602e16f88fe2b47c6edd4ee7
i686 libssh-devel-0.9.6-10.el8_8.i686.rpm 6599017c21e59c7d7c026dcad4bd7a9c6e9c025c046dd1cc8708d27c59c86a19
noarch libssh-config-0.9.6-10.el8_8.noarch.rpm 1646c6cf3518562e70f6c444ede3f0c91627fc42ccaea206c5cd63d890daf693
ppc64le libssh-0.9.6-10.el8_8.ppc64le.rpm 584bccc8e41815323f9df9a9816b0adf94d3a4afd69711ef784cf6b839824029
ppc64le libssh-devel-0.9.6-10.el8_8.ppc64le.rpm c391fbe6809920afd98c434ee17a5c47cb28be1300838b3604f644fd77889e97
s390x libssh-devel-0.9.6-10.el8_8.s390x.rpm 0a4e091bb35fb79cb1359b1bfe17a40a555f8f1d5a1e486c51db936cebaa3a60
s390x libssh-0.9.6-10.el8_8.s390x.rpm e3c3728ccb174f562fcf41de9ba7a9c8bdd6ca96b30713a569cddba21b5a797c
x86_64 libssh-devel-0.9.6-10.el8_8.x86_64.rpm a2f05505ae5656388a5240c926e6156923d4c89716485407e95bd4d7ba1e64d8
x86_64 libssh-0.9.6-10.el8_8.x86_64.rpm eb930fd007f78f0fed5552c0b0b0c2f53bb9bbb6af3960736ac57caa5de954fd
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.