Red Hat Security Advisory

RHSA-2024:2504

libssh security update

Released 2024-04-30 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libssh-devel-0.10.4-13.el9
Red Hat Enterprise Linux BaseOS (v. 9) libssh-0.10.4-13.el9, libssh-config-0.10.4-13.el9

TI-2023-06322 CVE-2023-6918 · GHSA-gpcj-wh2f-rr23

LOW 27

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01409 Published 2023-12-18 Partial fix · 0.9.6-14.el8, 0.10.4-13.el9 CWE-252

TI-2023-05531 CVE-2023-6004 · GHSA-f35j-mfvw-p857

LOW 24

A flaw was found in libssh.

CVSS 3.1MEDIUM 4.8 Local Low privileges User interaction EPSS 0.00449 Published 2024-01-03 Partial fix · 0.9.6-14.el8, 0.10.4-13.el9 CWE-74