MGASA-2023-0184
- Source
- https://advisories.mageia.org/MGASA-2023-0184.html
- Import Source
- https://advisories.mageia.org/MGASA-2023-0184.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2023-0184
- Related
- Published
- 2023-05-21T08:42:44Z
- Modified
- 2023-05-21T07:24:28Z
- Summary
- Updated libssh packages fix security vulnerability
- Details
-
Potential NULL dereference during rekeying with algorithm guessing. (CVE-2023-1667) Authorization bypass in pkiverifydata_signature. (CVE-2023-2283
- References
-
- https://advisories.mageia.org/MGASA-2023-0184.html
- https://bugs.mageia.org/show_bug.cgi?id=31925
- https://www.libssh.org/security/advisories/CVE-2023-1667.txt
- https://www.libssh.org/security/advisories/CVE-2023-2283.txt
- https://www.libssh.org/2023/05/04/libssh-0-10-5-and-libssh-0-9-7-security-releases/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/C4KR3JZOQP2PX7KTYELHWXLPT3JRJXUM/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / libssh
Package
- Name
- libssh
- Purl
- pkg:rpm/mageia/libssh?distro=mageia-8