Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0625-1

Опубликовано: 01 мар. 2016
Источник: suse-cvrf

Описание

Security update for libssh

This update for libssh fixes the following issues:

  • CVE-2016-0739: Fix Weakness in diffie-hellman secret key generation. (bsc#965875)

Список пакетов

SUSE Linux Enterprise Desktop 12
libssh4-0.6.3-11.1
SUSE Linux Enterprise Desktop 12 SP1
libssh4-0.6.3-11.1
SUSE Linux Enterprise Software Development Kit 12
libssh-devel-0.6.3-11.1
libssh-devel-doc-0.6.3-11.1
libssh4-0.6.3-11.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libssh-devel-0.6.3-11.1
libssh-devel-doc-0.6.3-11.1
libssh4-0.6.3-11.1
SUSE Linux Enterprise Workstation Extension 12
libssh4-0.6.3-11.1
SUSE Linux Enterprise Workstation Extension 12 SP1
libssh4-0.6.3-11.1

Ссылки

Описание

libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libssh4-0.6.3-11.1
SUSE Linux Enterprise Desktop 12:libssh4-0.6.3-11.1
SUSE Linux Enterprise Software Development Kit 12 SP1:libssh-devel-0.6.3-11.1
SUSE Linux Enterprise Software Development Kit 12 SP1:libssh-devel-doc-0.6.3-11.1
Ссылки