Red Hat Security AdvisoryRHSA-2019:1884
libssh2 security update
Released 2019-07-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libssh2-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux Client Optional (v. 7) libssh2-devel-1.4.3-12.el7_6.3, libssh2-docs-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux ComputeNode (v. 7) libssh2-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libssh2-devel-1.4.3-12.el7_6.3, libssh2-docs-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux Server (v. 7) libssh2-1.4.3-12.el7_6.3, libssh2-1.4.3-12.el7_6.3.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libssh2-devel-1.4.3-12.el7_6.3, libssh2-devel-1.4.3-12.el7_6.3.ppc, libssh2-docs-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux Workstation (v. 7) libssh2-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux Workstation Optional (v. 7) libssh2-devel-1.4.3-12.el7_6.3, libssh2-docs-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libssh2-1.4.3-12.el7_6.3
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libssh2-devel-1.4.3-12.el7_6.3, libssh2-docs-1.4.3-12.el7_6.3
Fixes 1 record
Priority MEDIUM 50
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.07898 · Published 2019-03-20 · Partial fix CWE-130
