Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 39: FEDORA-2023-d82bc5df49 critical: OpenSSH Vulnerability

fedora
Calendar Grey December 30, 2023
Dist Fedora Esm H88
Notice published for Fedora 38 regarding vsftpd, addressing security flaws in mod_tls that may permit remote exploits via TLS connections.
Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.

Summary

ProFTPD is an enhanced FTP server with a focus toward simplicity, security,

and ease of configuration. It features a very Apache-like configuration

syntax, and a highly customizable server infrastructure, including support for

multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory

visibility.

This package defaults to the standalone behavior of ProFTPD, but all the

needed scripts to have it run by systemd instead are included.

Update Information:

Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.

Topics%20covered

Topics Covered

security advisory moderate fedora proftpd ssh attack mod_sftp

Change Log

* Wed Dec 20 2023 Paul Howarth - 1.3.8b-1 - Update to 1.3.8b - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed (GH#1735) - Build system failed for specific module names (GH#1756) - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp (CVE-2023-48795, GH#1760) * Fri Dec 8 2023 Florian Weimer - 1.3.8a-2 - Additional C compatibility fix

References


[ 1 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-b87ec6cf47' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: proftpd
Product: Fedora 38
Version: 1.3.8b
Release: 1.fc38
URL: http://www.proftpd.org/
Summary: Flexible, stable and highly-configurable FTP server

Topics%20covered

Topics Covered

security advisory moderate fedora proftpd ssh attack mod_sftp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here