1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2023:4946-1

[SUSE-SU-2023:4946-1] Security update for libssh2_org

Severity Moderate
Affected Packages 6
CVEs 1
Info Packages References Vulnerabilities

Security update for libssh2_org

This update for libssh2_org fixes the following issues:

  • CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (Terrapin Attack) (bsc#1218127).
Package Affected Version
pkg:rpm/suse/libssh2-1?arch=x86_64&distro=sles-12&sp=5 < 1.11.0-29.9.1
pkg:rpm/suse/libssh2-1?arch=s390x&distro=sles-12&sp=5 < 1.11.0-29.9.1
pkg:rpm/suse/libssh2-1?arch=ppc64le&distro=sles-12&sp=5 < 1.11.0-29.9.1
pkg:rpm/suse/libssh2-1?arch=aarch64&distro=sles-12&sp=5 < 1.11.0-29.9.1
pkg:rpm/suse/libssh2-1-32bit?arch=x86_64&distro=sles-12&sp=5 < 1.11.0-29.9.1
pkg:rpm/suse/libssh2-1-32bit?arch=s390x&distro=sles-12&sp=5 < 1.11.0-29.9.1
ID
SUSE-SU-2023:4946-1
Severity
moderate
URL
https://www.suse.com/support/update/announcement/2023/suse-su-20234946-1/
Published
2023-12-21T11:34:48
(9 months ago)
Modified
2023-12-21T11:34:48
(9 months ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/libssh2-1?arch=x86_64&distro=sles-12&sp=5 suse libssh2-1 < 1.11.0-29.9.1 sles-12 x86_64
Affected pkg:rpm/suse/libssh2-1?arch=s390x&distro=sles-12&sp=5 suse libssh2-1 < 1.11.0-29.9.1 sles-12 s390x
Affected pkg:rpm/suse/libssh2-1?arch=ppc64le&distro=sles-12&sp=5 suse libssh2-1 < 1.11.0-29.9.1 sles-12 ppc64le
Affected pkg:rpm/suse/libssh2-1?arch=aarch64&distro=sles-12&sp=5 suse libssh2-1 < 1.11.0-29.9.1 sles-12 aarch64
Affected pkg:rpm/suse/libssh2-1-32bit?arch=x86_64&distro=sles-12&sp=5 suse libssh2-1-32bit < 1.11.0-29.9.1 sles-12 x86_64
Affected pkg:rpm/suse/libssh2-1-32bit?arch=s390x&distro=sles-12&sp=5 suse libssh2-1-32bit < 1.11.0-29.9.1 sles-12 s390x
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date