elsa-2024-3233

{
  "cves": [
    "CVE-2023-6918",
    "CVE-2023-6004"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "LOW"
  },
  "description": "[0.9.6-14]\n- Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)\n- Fix CVE-2023-6918 Missing checks for return values for digests\n- Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection\n  of malicious code through hostname\n- Note: version is bumped from 12 to 14 directly, as the z-stream\n  version in 8.9 also has 13. So bumping it to 14, will prevent\n  upgrade conflicts.\n- Resolves:RHEL-19690, RHEL-17244, RHEL-19312\n\n[0.9.6-12]\n- Fix loglevel regression\n- Related: rhbz#2182251, rhbz#2189742\n\n[0.9.6-11]\n- .fmf/version is needed to run the tests\n- Related: rhbz#2182251, rhbz#2189742\n\n[0.9.6-10]\n- Add missing ci.fmf file\n- Related: rhbz#2182251, rhbz#2189742\n\n[0.9.6-9]\n- Fix covscan errors found at gating\n- Related: rhbz#2182251, rhbz#2189742\n\n[0.9.6-8]\n- Backport test fixing commits to make the build pass\n- Related: rhbz#2182251, rhbz#2189742\n\n[0.9.6-7]\n- Fix NULL dereference during rekeying with algorithm guessing\n  GHSL-2023-032 / CVE-2023-1667\n- Fix possible authentication bypass\n  GHSL 2023-085 / CVE-2023-2283\n- Resolves: rhbz#2182251, rhbz#2189742\n\n[0.9.6-6]\n- Enable client and server testing build time\n- Fix failing rekey test on arch s390x\n- Resolves: rhbz#2126342\n\n[0.9.6-5]\n- Fix CI configuration for new TMT\n- Resolves: rhbz#2149910\n\n[0.9.6-4]\n- Make VERBOSE and lower log levels less verbose\n- Resolves: rhbz#2091512\n\n[0.9.6-3]\n- Remove STI tests\n\n[0.9.6-2]\n- Remove bad patch causing errors\n- Adding BuildRequires for openssh (SSHD support)\n\n[0.9.6-1]\n- Fix CVE-2021-3634: Fix possible heap-buffer overflow when\n  rekeying with different key exchange mechanism\n- Rebase to version 0.9.6\n- Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c\n- Resolves: rhbz#1896651, rhbz#1994600\n\n[0.9.4-4]\n- Revert previous commit as it is incorrect.\n\n[0.9.6-1]\n- Fix CVE-2021-3634: Fix possible heap-buffer overflow when\n  rekeying with different key exchange mechanism (#1978810)\n\n[0.9.4-3]\n- Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if\n  ssh_buffer_new returns NULL (#1862646)\n\n[0.9.4-2]\n- Do not return error when server properly closed the channel (#1849071)\n- Add a test for CVE-2019-14889\n- Do not parse configuration file in torture_knownhosts test\n\n[0.9.4-1]\n- Update to version 0.9.4\n  https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/\n- Fixed CVE-2019-14889 (#1781782)\n- Fixed CVE-2020-1730 (#1802422)\n- Create missing directories in the path provided for known_hosts files (#1733914)\n- Removed inclusion of OpenSSH server configuration file from\n  libssh_server.config (#1821339)\n\n[0.9.0-4]\n- Skip 1024 bits RSA key generation test in FIPS mode (#1734485)\n\n[0.9.0-3]\n- Add Obsoletes in libssh-config to avoid conflict with old libssh which\n  installed the configuration files.\n\n[0.9.0-2]\n- Eliminate circular dependency with libssh-config subpackage\n\n[0.9.0-1]\n- Update to version 0.9.0\n  https://www.libssh.org/2019/06/28/libssh-0-9-0/\n- Added explicit Requires for crypto-policies\n- Do not ignore known_hosts keys when SSH_OPTIONS_HOSTKEYS is set\n- Provide the configuration files in a separate libssh-config subpackage\n\n[0.8.91-0.1]\n- Update to 0.9.0 pre release version (0.8.91)\n- Added default configuration files for client and server\n- Removed unused patch files left behind\n- Fixed issues found to run upstream test suite with SELinux\n\n[0.8.5-2]\n- Fix more regressions introduced by the fixes for CVE-2018-10933\n\n[0.8.5-1]\n- Update to version 0.8.5\n  * Fixed an issue where global known_hosts file was ignored (#1649321)\n  * Fixed ssh_get_fd() to return writable file descriptor (#1649319)\n  * Fixed regression introduced in known_hosts parsing (#1649315)\n  * Fixed a regression which caused only the first algorithm in known_hosts to\n    be considered (#1638790)\n\n[0.8.3-5]\n- Fix regressions introduced by the fixes for CVE-2018-10933\n\n[0.8.3-4]\n- Fix for authentication bypass issue in server implementation (#1639926)\n\n[0.8.3-3]\n- Fixed errors found by static code analysis (#1602594)\n\n[0.8.3-1]\n- Update to version 0.8.3\n  * Added support for rsa-sha2 (#1610882)\n  * Added support to parse private keys in openssh container format (other than\n    ed25519) (#1622983)\n  * Added support for diffie-hellman-group18-sha512 and\n    diffie-hellman-group16-sha512 (#1610885)\n  * Added ssh_get_fingerprint_hash()\n  * Added ssh_pki_export_privkey_base64()\n  * Added support for Match keyword in config file\n  * Improved performance and reduced memory footprint for sftp\n  * Fixed ecdsa publickey auth\n  * Fixed reading a closed channel\n  * Added support to announce posix-rename@openssh.com and hardlink@openssh.com\n    in the sftp server\n  * Use -fstack-protector-strong if possible (#1624135)\n\n[0.8.1-4]\n- Fix the creation of symbolic links for libssh_threads.so.4\n\n[0.8.1-3]\n- Add missing Provides for libssh_threads.so.4\n\n[0.8.1-2]\n- Add Provides for libssh_threads.so to unbreak applications\n- Fix ABIMap detection to not depend on python to build\n\n[0.8.1-1]\n- Update to version 0.8.1\n  https://www.libssh.org/2018/08/13/libssh-0-8-1/\n\n[0.8.0-1]\n- Update to version 0.8.0\n  https://www.libssh.org/2018/08/10/libssh-0-8-0/\n\n[0.7.5-9]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild\n\n[0.7.5-8]\n- BR: gcc-c++, use %make_build\n\n[0.7.5-7]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n- Related: bug#1614611\n\n[0.7.5-6]\n- resolves: #1540021 - Build against OpenSSL 1.1\n\n[0.7.5-5]\n- Switch to %ldconfig_scriptlets\n\n[0.7.5-4]\n- Fix parsing ssh_config\n\n[0.7.5-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild\n\n[0.7.5-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild\n\n[0.7.5-1]\n- Update to version 0.7.5\n\n[0.7.4-2]\n- BR: compat-openssl10-devel (f26+, #1423088)\n- use %license\n- -devel: drop hardcoded pkgconfig dep (let autodeps handle it)\n- %files: track library sonames, simplify -devel\n- %install: use 'install/fast' target\n- .spec cosmetics, drop deprecated %clean section\n\n[0.7.4-1]\n- Update to version 0.7.4\n  * Added id_ed25519 to the default identity list\n  * Fixed sftp EOF packet handling\n  * Fixed ssh_send_banner() to confirm with RFC 4253\n  * Fixed some memory leaks\n- resolves: #1419007\n\n[0.7.3-1]\n- resolves: #1311259 - Fix CVE-2016-0739\n- resolves: #1311332 - Update to version 0.7.3\n  * Fixed CVE-2016-0739\n  * Fixed ssh-agent on big endian\n  * Fixed some documentation issues\n- Enabled GSSAPI support\n\n[0.7.2-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild\n\n[0.7.2-2]\n- resolves: #1271230 - Fix ssh-agent support on big endian\n\n[0.7.2-1]\n- Update to version 0.7.2\n  * Fixed OpenSSL detection on Windows\n  * Fixed return status for ssh_userauth_agent()\n  * Fixed KEX to prefer hmac-sha2-256\n  * Fixed sftp packet handling\n  * Fixed return values of ssh_key_is_(public|private)\n  * Fixed bug in global success reply\n- resolves: #1267346\n\n[0.7.1-1]\n- Update to version 0.7.1\n  * Fixed SSH_AUTH_PARTIAL auth with auto public key\n  * Fixed memory leak in session options\n  * Fixed allocation of ed25519 public keys\n  * Fixed channel exit-status and exit-signal\n  * Reintroduce ssh_forward_listen()\n\n[0.7.0-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild\n\n[0.7.0-2]\n- Add patch to fix undefined symbol: ssh_forward_listen (bug #1221310)\n\n[0.7.0-1]\n- Update to version 0.7.0\n  * Added support for ed25519 keys\n  * Added SHA2 algorithms for HMAC\n  * Added improved and more secure buffer handling code\n  * Added callback for auth_none_function\n  * Added support for ECDSA private key signing\n  * Added more tests\n  * Fixed a lot of bugs\n  * Improved API documentation\n\n[0.6.5-1]\n- resolves: #1213775 - Security fix for CVE-2015-3146\n- resolves: #1218076 - Security fix for CVE-2015-3146\n\n[0.6.4-1]\n- Security fix for CVE-2014-8132.\n\n[0.6.3-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild\n\n[0.6.3-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild\n\n[0.6.3-1]\n- Fix CVE-2014-0017.\n\n[0.6.1-1]\n- Update to version 0.6.1.\n- resolves: #1056757 - Fix scp mode.\n- resolves: #1053305 - Fix known_hosts heuristic.\n\n[0.6.0-1]\n- Update to 0.6.0\n\n[0.5.5-1]\n- Update to 0.5.5.\n- Clenup the spec file.\n\n[0.5.4-5]\n- Add EPEL 5 support.\n- Add Debian patches to enable Doxygen documentation.\n\n[0.5.4-4]\n- Add patch for #982685.\n\n[0.5.4-3]\n- Clean up SPEC file and fix rpmlint complaints.\n\n[0.5.4-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\n\n[0.5.4-1]\n- update to security 0.5.4 release\n- CVE-2013-0176 (#894407)\n\n[0.5.3-1]\n- update to security 0.5.3 release (#878465)\n\n[0.5.2-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild\n\n[0.5.2-1]\n- update to 0.5.2 version (#730270)\n\n[0.5.0-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild\n\n[0.5.0-1]\n- bounce versionn to 0.5.0 (#709785)\n- the support for protocol v1 is disabled\n\n[0.4.8-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild\n\n[0.4.8-1]\n- bounce versionn to 0.4.8 (#670456)\n\n[0.4.6-1]\n- bounce versionn to 0.4.6 (#630602)\n\n[0.4.4-1]\n- bounce versionn to 0.4.4 (#598592)\n\n[0.4.3-1]\n- bounce versionn to 0.4.3 (#593288)\n\n[0.4.2-1]\n- bounce versionn to 0.4.2 (#573972)\n\n[0.4.1-1]\n- bounce versionn to 0.4.1 (#565870)\n\n[0.4.0-1]\n- bounce versionn to 0.4.0 (#541010)\n\n[0.3.92-2]\n- typo in spec file\n\n[0.3.92-1]\n- bounce versionn to 0.3.92 (0.4 beta2) (#541010)\n\n[0.2-4]\n- rebuilt with new openssl\n\n[0.2-3]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild\n\n[0.2-2]\n- Small changes during review\n\n[0.2-1]\n- Initial build",
  "id": "ELSA-2024-3233",
  "ovalId": "oval:com.oracle.elsa:def:20243233",
  "source": "oracle_linux",
  "title": "ELSA-2024-3233:  libssh security update (LOW)",
  "url": "https://linux.oracle.com/errata/ELSA-2024-3233.html"
}