Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian DSA-5599-1: Critical Update for phpseclib Against Terrapin Attack

debian
Calendar Grey January 12, 2024
Debian Logo
The phpseclib developers published bulletin DSA-5599-1 concerning risks from the Terrapin breach, recommending immediate updates.
Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol is prone to a prefix truncation attack, known as the "Terrapin attack"
Topics%20covered

Topics Covered

security advisory update Debian SSH protocol phpseclib Terrapin attack

Summary

Details can be found at https://terrapin-attack.com/

For the oldstable distribution (bullseye), this problem has been fixed
in version 1.0.19-3+deb11u1.

For the stable distribution (bookworm), this problem has been fixed in
version 1.0.20-1+deb12u1.

We recommend that you upgrade your phpseclib packages.

For the detailed security status of phpseclib please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/phpseclib

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: phpseclib
CVE ID: CVE-2023-48795

Topics%20covered

Topics Covered

security advisory update Debian SSH protocol phpseclib Terrapin attack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here