Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Debian Bookworm DSA-5750-1 Critical: AsyncSSH Terrapin Attack Fix

debian
Calendar Grey August 18, 2024
Debian Logo
The new "secure kex" SSH feature boosts python-asyncssh's defense against vulnerabilities like the Gecko breach. Update advised.
Support for the "strict kex" SSH extension has been backported to AsyncSSH (a Python implementation of the SSHv2 protocol) as hardening against the Terrapin attack

Summary

Support for the "strict kex" SSH extension has been backported to
AsyncSSH (a Python implementation of the SSHv2 protocol) as hardening
against the Terrapin attack.

For the stable distribution (bookworm), this problem has been fixed in
version 2.10.1-2+deb12u1.

We recommend that you upgrade your python-asyncssh packages.

For the detailed security status of python-asyncssh please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/python-asyncssh

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: python-asyncssh
CVE ID: CVE-2023-48795

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here