Red Hat Security Advisory

RHSA-2020:4545

libssh security, bug fix, and enhancement update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libssh-devel-0.9.4-2.el8
Red Hat Enterprise Linux BaseOS (v. 8) libssh-0.9.4-2.el8, libssh-config-0.9.4-2.el8

TI-2019-11093 CVE-2019-14889 · GHSA-mrxf-x73j-79wm

MEDIUM 44

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03174 Published 2019-12-10 Fixed in 0.9.3, 0.8.8 CWE-78

TI-2020-01674 CVE-2020-1730 · GHSA-6rh3-m266-5m77

LOW 30

A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03142 Published 2020-04-13 Fixed CWE-476