gpp_maybe Security update for libssh

SUSE-SLE-Module-Basesystem-15-SP5-2024-140

This update for libssh fixes the following issues: Security fixes: - CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209) - CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126) - CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186) - CVE-2023-1667: Fixed NULL dereference during rekeying with algorithm guessing (bsc#1211188) - CVE-2023-2283: Fixed possible authorization bypass in pki_verify_data_signature under low-memory conditions (bsc#1211190) Other fixes: - Update to version 0.9.8 - Allow @ in usernames when parsing from URI composes - Update to version 0.9.7 - Fix several memory leaks in GSSAPI handling code

• Release Date
  Jan 18 2024
• References
  Bugzilla: 1211190, 1218126, 1218186, 1218209, 1211188
  CVEs: CVE-2023-1667, CVE-2023-6918, CVE-2023-48795, CVE-2023-2283, CVE-2023-6004
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.5 ppc64le

• Packages
  libssh
  The SSH library

  0.9.8-150400.3.3.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150400.3.3.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150400.3.3.1 lock rpm

  libssh4
  SSH library

  0.9.8-150400.3.3.1 lock rpm

Basesystem Module 15.5 s390x

• Packages
  libssh
  The SSH library

  0.9.8-150400.3.3.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150400.3.3.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150400.3.3.1 lock rpm

  libssh4
  SSH library

  0.9.8-150400.3.3.1 lock rpm

Basesystem Module 15.5 aarch64

• Packages
  libssh
  The SSH library

  0.9.8-150400.3.3.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150400.3.3.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150400.3.3.1 lock rpm

  libssh4
  SSH library

  0.9.8-150400.3.3.1 lock rpm

Basesystem Module 15.5 x86_64

• Packages
  libssh
  The SSH library

  0.9.8-150400.3.3.1 lock src

  libssh-config
  SSH library configuration files

  0.9.8-150400.3.3.1 lock rpm

  libssh-devel
  SSH library development headers

  0.9.8-150400.3.3.1 lock rpm

  libssh4
  SSH library

  0.9.8-150400.3.3.1 lock rpm

  libssh4-32bit
  SSH library

  0.9.8-150400.3.3.1 lock rpm