[ALSA-2024:2504] Low: libssh security update
Type:
security
Severity:
low
Release date:
2024-05-07
Description:
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fix(es): * libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004) * libssh: Missing checks for return values for digests (CVE-2023-6918) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 libssh-0.10.4-13.el9.aarch64.rpm b71b69337cc02300300990ed3a3ad08b9f290881f025bd9ed825ca680c2378be
aarch64 libssh-devel-0.10.4-13.el9.aarch64.rpm ef77faf82e1bad273bc9f6e5bbb2a8f9ccecc069cb9a810182651ef2e48a6cf7
i686 libssh-devel-0.10.4-13.el9.i686.rpm 7b1fc7a9ca54dc30cbbacf27777fa983ce1797a4442464285f3d8b828d028cf4
i686 libssh-0.10.4-13.el9.i686.rpm d698c93cd633813e5d8aa7c519780e36104603ef30f723695eb4779eb7872f2f
noarch libssh-config-0.10.4-13.el9.noarch.rpm 85ecc8ec9402526a3679378df72e4bca55583c0b6f819f5f3bc34f3f3f338430
ppc64le libssh-0.10.4-13.el9.ppc64le.rpm 670ae4d654e6611345fc6475d4d6682c5b556be0f8e2599fb923d0af2786d0a8
ppc64le libssh-devel-0.10.4-13.el9.ppc64le.rpm f093228143892782d01465e5484bec39177958f7bd65d9bfa7a1bbfc11422eca
s390x libssh-devel-0.10.4-13.el9.s390x.rpm 0ee9aa4b6b5765f1135935919ddcb73d02ed6a622eb8fe57cb0ceb63fee90423
s390x libssh-0.10.4-13.el9.s390x.rpm 940c7715e5c55f604ffd9f74b832dc9d4d6d6b381534420bbd869f1b0d1d63d4
x86_64 libssh-0.10.4-13.el9.x86_64.rpm 3fde58b1c5fd34aa3e3c4f56a22a4e3149d2fa83dcf9f1db1c87cb455ab62fde
x86_64 libssh-devel-0.10.4-13.el9.x86_64.rpm b385e7afcc9a2ab3d8f8aa70b0c28e66b59bf3de64656464bd0143a5c6057bd8
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.