Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Slackware: 14.2, 14.3 Advisory 2023-058-02 High: Libssh Vulnerability Alert

slackware
Calendar Grey February 26, 2016
Scroller Slackware
Recent libssh updates for Slackware resolve a critical key generation vulnerability. It's essential to update promptly to maintain system security and protect integrity.
New libssh packages are available for Slackware 14.0, 14.1, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libssh-0.7.3-i486-1_slack14.1.txz: Upgraded. Fixed weak key generation. Due to a bug in the ephemeral secret key generation for the diffie-hellman-group1 and diffie-hellman-group14 methods, ephemeral secret keys of size 128 bits are generated, instead of the recommended sizes of 1024 and 2048 bits, giving a practical security of 63 bits. For more information, see: https://www.cve.org/CVERecord?id=CVE-2016-0739 (* Security fix *)

Topics%20covered

Topics Covered

security advisory update critical software fix Slackware libssh key issue

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 76526494e39f1ddeb5a385a2913eb105 libssh-0.7.3-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: b21ad5638e9eb16080fe7231a38f368a libssh-0.7.3-x86_64-1_slack14.0.txz
Slackware 14.1 package: 698ee24d452a5b40d022f5c15eb10fb1 libssh-0.7.3-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 63a3b5c088bbdc6906b369c8df73e4da libssh-0.7.3-x86_64-1_slack14.1.txz
Slackware -current package: 553ffb7b4506007207da4bcdce3e23d4 l/libssh-0.7.3-i586-1.txz
Slackware x86_64 -current package: 2647645e60db0e669a398664a91c4ecd l/libssh-0.7.3-x86_64-1.txz

Topics%20covered

Topics Covered

security advisory update critical software fix Slackware libssh key issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg libssh-0.7.3-i486-1_slack14.1.txz