[RHSA-2024:0628] libssh security update

Severity Moderate

Affected Packages 11

CVEs 1

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Package	Affected Version
pkg:rpm/redhat/libssh?arch=x86_64&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh?arch=s390x&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh?arch=ppc64le&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh?arch=i686&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh?arch=aarch64&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh-devel?arch=x86_64&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh-devel?arch=s390x&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh-devel?arch=ppc64le&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh-devel?arch=i686&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh-devel?arch=aarch64&distro=redhat-8.9	< 0.9.6-13.el8_9
pkg:rpm/redhat/libssh-config?distro=redhat-8.9	< 0.9.6-13.el8_9

ID

RHSA-2024:0628

Severity

moderate

URL

https://access.redhat.com/errata/RHSA-2024:0628

Published

2024-01-31T00:00:00
(7 months ago)

Modified

2024-01-31T00:00:00
(7 months ago)

Rights

Other Advisories

Source	# ID	URL
Bugzilla	2254210	https://bugzilla.redhat.com/2254210
RHSA	RHSA-2024:0628	https://access.redhat.com/errata/RHSA-2024:0628
CVE	CVE-2023-48795	https://access.redhat.com/security/cve/CVE-2023-48795

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch
Affected	pkg:rpm/redhat/libssh?arch=x86_64&distro=redhat-8.9	redhat	libssh	< 0.9.6-13.el8_9	redhat-8.9	x86_64
Affected	pkg:rpm/redhat/libssh?arch=s390x&distro=redhat-8.9	redhat	libssh	< 0.9.6-13.el8_9	redhat-8.9	s390x
Affected	pkg:rpm/redhat/libssh?arch=ppc64le&distro=redhat-8.9	redhat	libssh	< 0.9.6-13.el8_9	redhat-8.9	ppc64le
Affected	pkg:rpm/redhat/libssh?arch=i686&distro=redhat-8.9	redhat	libssh	< 0.9.6-13.el8_9	redhat-8.9	i686
Affected	pkg:rpm/redhat/libssh?arch=aarch64&distro=redhat-8.9	redhat	libssh	< 0.9.6-13.el8_9	redhat-8.9	aarch64
Affected	pkg:rpm/redhat/libssh-devel?arch=x86_64&distro=redhat-8.9	redhat	libssh-devel	< 0.9.6-13.el8_9	redhat-8.9	x86_64
Affected	pkg:rpm/redhat/libssh-devel?arch=s390x&distro=redhat-8.9	redhat	libssh-devel	< 0.9.6-13.el8_9	redhat-8.9	s390x
Affected	pkg:rpm/redhat/libssh-devel?arch=ppc64le&distro=redhat-8.9	redhat	libssh-devel	< 0.9.6-13.el8_9	redhat-8.9	ppc64le
Affected	pkg:rpm/redhat/libssh-devel?arch=i686&distro=redhat-8.9	redhat	libssh-devel	< 0.9.6-13.el8_9	redhat-8.9	i686
Affected	pkg:rpm/redhat/libssh-devel?arch=aarch64&distro=redhat-8.9	redhat	libssh-devel	< 0.9.6-13.el8_9	redhat-8.9	aarch64
Affected	pkg:rpm/redhat/libssh-config?distro=redhat-8.9	redhat	libssh-config	< 0.9.6-13.el8_9	redhat-8.9

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date