Stay Secure with the Latest Linux Advisories

security advisorymoderateinformation leak

Mageia 7: MGASA-2021-0118 Moderate: OpenSSH Info Leak Risk

The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client) (CVE-2020-14145). . MGASA-2021-0118 - Updated openssh packages fix a security vulnerability Publication date: 12 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0118.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-14145 The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client) (CVE-2020-14145). References: - https://bugs.mageia.org/show_bug.cgi?id=27706 - - https://www.cve.org/CVERecord?id=CVE-2020-14145 SRPMS: - 7/core/openssh-8.0p1-1.1.mga7 . A security patch for OpenSSH within the Mageia distribution addresses an information disclosure flaw that could result in possible man-in-the-middle exploits.. OpenSSH Update, Mageia Security, Information Leak, Client-Side Issue, Security Patch. . LinuxSecurity.com Team

Mar 11, 2021 Mageia