Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Warning: Undefined array key "Description" in /var/www/www.linuxsecurity.com-443/html/lsadvisories/lsadvisories.php on line 220

Fedora 39 FEDORA-2023-153404713b moderate: SSH attack on ProFTPD

fedora
Calendar Grey December 30, 2023
Dist Fedora Esm H88
Patch issued for Terrapin SSH vulnerability affecting ProFTPD mod_sftp in Fedora 39, addressing CVE-2023-48795 security issue.
Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.

Summary

ProFTPD is an enhanced FTP server with a focus toward simplicity, security,

and ease of configuration. It features a very Apache-like configuration

syntax, and a highly customizable server infrastructure, including support for

multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory

visibility.

This package defaults to the standalone behavior of ProFTPD, but all the

needed scripts to have it run by systemd instead are included.

Update Information:

Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.

Topics%20covered

Topics Covered

security advisory fedora moderate severity proftpd ssh attack attack fix

Change Log

* Wed Dec 20 2023 Paul Howarth - 1.3.8b-1 - Update to 1.3.8b - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed (GH#1735) - Build system failed for specific module names (GH#1756) - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp (CVE-2023-48795, GH#1760) * Fri Dec 8 2023 Florian Weimer - 1.3.8a-2 - Additional C compatibility fix

References


[ 1 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-153404713b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: proftpd
Product: Fedora 39
Version: 1.3.8b
Release: 1.fc39
URL: http://www.proftpd.org/
Summary: Flexible, stable and highly-configurable FTP server

Topics%20covered

Topics Covered

security advisory fedora moderate severity proftpd ssh attack attack fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here