Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0622-1

Опубликовано: 01 мар. 2016
Источник: suse-cvrf

Описание

Security update for libssh

This update for libssh fixes the following issues:

CVE-2016-0739: Fix Weakness in diffie-hellman secret key generation. (bsc#965875)

Список пакетов

SUSE Linux Enterprise Desktop 11 SP4
libssh2-0.2-5.22.1
SUSE Linux Enterprise Software Development Kit 11 SP4
libssh-devel-0.2-5.22.1
libssh-devel-doc-0.2-5.22.1
libssh2-0.2-5.22.1

Ссылки

Описание

libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Затронутые продукты
SUSE Linux Enterprise Desktop 11 SP4:libssh2-0.2-5.22.1
SUSE Linux Enterprise Software Development Kit 11 SP4:libssh-devel-0.2-5.22.1
SUSE Linux Enterprise Software Development Kit 11 SP4:libssh-devel-doc-0.2-5.22.1
SUSE Linux Enterprise Software Development Kit 11 SP4:libssh2-0.2-5.22.1
Ссылки