Stay Secure with the Latest Linux Advisories

security advisorycriticaldebian

Debian Bookworm DSA-5750-1 Critical: AsyncSSH Terrapin Attack Fix

Support for the "strict kex" SSH extension has been backported to AsyncSSH (a Python implementation of the SSHv2 protocol) as hardening against the Terrapin attack. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5750-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff August 18, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : python-asyncssh CVE ID : CVE-2023-48795 Support for the "strict kex" SSH extension has been backported to AsyncSSH (a Python implementation of the SSHv2 protocol) as hardening against the Terrapin attack. For the stable distribution (bookworm), this problem has been fixed in version 2.10.1-2+deb12u1. We recommend that you upgrade your python-asyncssh packages. For the detailed security status of python-asyncssh please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/python-asyncssh Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The new "secure kex" SSH feature boosts python-asyncssh's defense against vulnerabilities like the Gecko breach. Update advised.. Debian Security Advisory, AsyncSSH Update, SSH Hardening Techniques. . Severity: Critical. LinuxSecurity.com Team

Aug 18, 2024 •Critical Debian