Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:3162-1

Опубликовано: 16 окт. 2018
Источник: suse-cvrf

Описание

Security update for libssh

This update for libssh fixes the following issues:

  • CVE-2018-10933: Fixed a server mode authentication bypass (bsc#1108020).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
libssh-devel-0.7.5-6.3.1
libssh4-0.7.5-6.3.1
libssh4-32bit-0.7.5-6.3.1

Ссылки

Описание

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:libssh-devel-0.7.5-6.3.1
SUSE Linux Enterprise Module for Basesystem 15:libssh4-0.7.5-6.3.1
SUSE Linux Enterprise Module for Basesystem 15:libssh4-32bit-0.7.5-6.3.1
Ссылки