ELSA-2023-3839

ELSA-2023-3839 - libssh security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-06-29

Description

[0.9.6-10]
- Add missing ci.fmf file
- Related: rhbz#2182251, rhbz#2189742

[0.9.6-9]
- Fix covscan errors found at gating
- Related: rhbz#2182251, rhbz#2189742

[0.9.6-8]
- Backport test fixing commits to make the build pass
- Related: rhbz#2182251, rhbz#2189742

[0.9.6-7]
- Fix NULL dereference during rekeying with algorithm guessing
GHSL-2023-032 / CVE-2023-1667
- Fix possible authentication bypass
GHSL 2023-085 / CVE-2023-2283
- Resolves: rhbz#2182251, rhbz#2189742

Related CVEs

CVE-2023-2283

CVE-2023-1667

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	libssh-0.9.6-10.el8_8.src.rpm	8ce4d9484f00fbafefa3fa990282e5a6	-
	libssh-0.9.6-10.el8_8.aarch64.rpm	58da5dd8bcacfeb38fed3eb3edbb9b7e	-
	libssh-config-0.9.6-10.el8_8.noarch.rpm	6250f0cff7f56d243b442ba2802552ba	-
	libssh-devel-0.9.6-10.el8_8.aarch64.rpm	1d0c39dafad0f7dd7b2ce5154df941d7	-
Oracle Linux 8 (x86_64)	libssh-0.9.6-10.el8_8.src.rpm	8ce4d9484f00fbafefa3fa990282e5a6	-
	libssh-0.9.6-10.el8_8.i686.rpm	c84bcd9d8f2aadb7fc1b7beddc3f0c30	-
	libssh-0.9.6-10.el8_8.x86_64.rpm	9d25db22e0e6035cffa3ebc6ae3589f1	-
	libssh-config-0.9.6-10.el8_8.noarch.rpm	6250f0cff7f56d243b442ba2802552ba	-
	libssh-devel-0.9.6-10.el8_8.i686.rpm	22f1b362e27ac3d0ce1cf2ea387dca58	-
	libssh-devel-0.9.6-10.el8_8.x86_64.rpm	325a924031fd7fbc977cbe3da17ef081	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team