Fedora 39: FEDORA-2023-d2956318e4 Urgent: python-asyncssh Session Threat
fedora
November 26, 2023
Security fix for CVE-2023-46446 and CVE-2023-46445
Summary
Python 3 library for asynchronous client and
server-side SSH communication. It uses the Python asyncio module and
implements many SSH protocol features such as the various channels,
SFTP, SCP, forwarding, session multiplexing over a connection and more.
Update Information:
Security fix for CVE-2023-46446 and CVE-2023-46445
Change Log
* Sat Nov 11 2023 Georg Sauthoff
References
[ 1 ] Bug #2250326 - CVE-2023-46445 python-asyncssh: Rogue Extension Negotiation
https://bugzilla.redhat.com/show_bug.cgi?id=2250326
[ 2 ] Bug #2250329 - CVE-2023-46446 python-asyncssh: Rogue Session Attack
https://bugzilla.redhat.com/show_bug.cgi?id=2250329
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-d2956318e4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: python-asyncssh
Product: Fedora 39
Version: 2.14.1
Release: 1.fc39
Summary: Asynchronous SSH for Python
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!