Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 21: FEDORA-2015-7590 Moderate Libssh Null Pointer Dereference

fedora
Calendar Grey May 14, 2015
Dist Fedora Esm H88
Ubuntu 18.04 users should now address CVE-2017-1234 with an essential OpenSSL patch to strengthen protection and ensure integrity.
Security fix for CVE-2015-3146

Summary

The ssh library was designed to be used by programmers needing a working SSH

implementation by the mean of a library. The complete control of the client is

made by the programmer. With libssh, you can remotely execute programs, transfer

files, use a secure and transparent tunnel for your remote programs. With its

Secure FTP implementation, you can play with remote files easily, without

third-party programs others than libcrypto (from openssl).

Update Information:

Security fix for CVE-2015-3146

Change Log

* Thu Apr 30 2015 Andreas Schneider - 0.6.5-1 - resolves: #1213775 - Security fix for CVE-2015-3146 - resolves: #1218076 - Security fix for CVE-2015-3146 * Fri Dec 19 2014 - Andreas Schneider - 0.6.4-1 - Security fix for CVE-2014-8132.

References


[ 1 ] Bug #1213775 - CVE-2015-3146 libssh: null pointer dereference due to a logical error in the handling of a SSH_MSG_NEWKEYS and KEXDH_REPLY packets https://bugzilla.redhat.com/show_bug.cgi?id=1213775

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libssh' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: libssh
Product: Fedora 21
Version: 0.6.5
Release: 1.fc21
URL: Summary : A library implementing the SSH protocol

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here