Lucene search
AlmaLinuxALSA-2024:0628HistoryJan 31, 2024 - 12:00 a.m.
Moderate: libssh security update
2024-01-3100:00:00
errata.almalinux.org
17
libssh
security update
ssh protocol
server applications
prefix truncation attack
bpp
cve-2023-48795
unix
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.
Security Fix(es):
- ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | i686 | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.i686.rpm |
| almalinux | 8 | noarch | libssh-config | < 0.9.6-13.el8_9 | libssh-config-0.9.6-13.el8_9.noarch.rpm |
| almalinux | 8 | i686 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.i686.rpm |
| almalinux | 8 | x86_64 | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.x86_64.rpm |
| almalinux | 8 | aarch64 | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.aarch64.rpm |
| almalinux | 8 | x86_64 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.x86_64.rpm |
| almalinux | 8 | aarch64 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.aarch64.rpm |
| almalinux | 8 | ppc64le | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.ppc64le.rpm |
| almalinux | 8 | ppc64le | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.ppc64le.rpm |
| almalinux | 8 | s390x | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.s390x.rpm |
Related
nessus
nessus
Fedora 39 : podman (2024-3bb23c77f3)
2024-01-08 00:00:00
Fedora 39 : putty (2024-d946b9ad25)
2024-01-10 00:00:00
paloalto
paloalto
Impact of Terrapin SSH Attack
2024-01-09 01:30:00
openvas
openvas
Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2024-1178)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2024-1317)
2024-03-13 00:00:00
Prefix Truncation Attacks in SSH Specification (Terrapin Attack)
2023-12-20 00:00:00
redhat
redhat
(RHSA-2024:0628) Moderate: libssh security update
2024-01-31 08:17:03
(RHSA-2024:1196) Moderate: Red Hat JBoss Enterprise Application Platform 7.4 security update
2024-03-06 17:50:02
(RHSA-2024:1150) Moderate: buildah security update
2024-03-05 15:32:31
ibm
ibm
osv
osv
python-asyncssh - security update
2024-02-01 00:00:00
phpseclib - security update
2024-01-25 00:00:00
php-phpseclib - security update
2024-01-12 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: python-paramiko-3.4.0-1.fc38
2024-01-11 02:17:01
[SECURITY] Fedora 39 Update: golang-x-crypto-0.18.0-1.fc39
2024-01-18 01:47:06
[SECURITY] Fedora 38 Update: podman-4.8.3-1.fc38
2024-01-19 03:25:05
freebsd
freebsd
putty -- add protocol extension against 'Terrapin attack'
2023-10-16 00:00:00
jenkins -- Terrapin SSH vulnerability in Jenkins CLI client
2024-04-17 00:00:00
mageia
mageia
Updated filezilla packages fix a security vulnerability ("Terrapin attack")
2024-02-10 04:03:35
Updated libssh2 packages fix a security vulnerability (Terrapin Attack)
2024-01-08 13:12:44
Updated erlang packages fix a security vulnerability (Terrapin Attack)
2024-01-20 01:43:32
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package erlang for versions less than 25.2-2
2024-02-25 03:00:06
CVE-2023-48795 affecting package jsch for versions less than 0.1.55-2
2024-05-17 09:07:16
rosalinux
rosalinux
Advisory ROSA-SA-2024-2382
2024-03-26 11:47:18
veracode
veracode
Rogue Session Attack (Terrapin)
2023-12-19 06:46:15
Prefix Truncation Attack (Terrapin Attack)
2023-12-19 09:12:16
debian
debian
[SECURITY] [DSA 5599-1] phpseclib security update
2024-01-12 07:13:27
[SECURITY] [DSA 5600-1] php-phpseclib security update
2024-01-12 07:13:37
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:31
oraclelinux
oraclelinux
openssh security update
2024-02-13 00:00:00
buildah security update
2024-03-07 00:00:00
openssh security update
2024-03-18 00:00:00
prion
prion
Design/Logic Flaw
2023-12-18 16:15:00
cvelist
cvelist
CVE-2023-48795
2023-12-18 00:00:00
redos
redos
ROS-20240408-15
2024-04-08 00:00:00
ROS-20240408-13
2024-04-08 00:00:00
ROS-20240412-02
2024-04-12 00:00:00
atlassian
atlassian
CVE-2023-48795 vulnerability on SSH
2024-01-04 17:19:13
alpinelinux
alpinelinux
CVE-2023-48795
2023-12-18 16:15:10
ubuntu
ubuntu
libssh2 vulnerability
2024-01-15 00:00:00
FileZilla vulnerability
2024-01-18 00:00:00
LXD vulnerability
2024-04-22 00:00:00
cloudfoundry
cloudfoundry
USN-6561-1: libssh vulnerability | Cloud Foundry
2024-04-04 00:00:00
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
github
github
ubuntucve
ubuntucve
CVE-2023-48795
2023-12-18 00:00:00
qualysblog
qualysblog
almalinux
almalinux
Moderate: buildah security update
2024-03-05 00:00:00