RLSA-2024:2504

Synopsis

Low: libssh security update

Description

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004)

* libssh: Missing checks for return values for digests (CVE-2023-6918)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2251110 2254997

CVEs

CVE-2023-6004 CVE-2023-6918

Affected packages

Rocky Linux 9 ppc64le - BaseOS

libssh-debuginfo-0:0.10.4-13.el9.ppc64le.rpm libssh-debugsource-0:0.10.4-13.el9.ppc64le.rpm libssh-config-0:0.10.4-13.el9.noarch.rpm libssh-0:0.10.4-13.el9.ppc64le.rpm libssh-0:0.10.4-13.el9.src.rpm

Rocky Linux 9 x86_64 - AppStream

libssh-devel-0:0.10.4-13.el9.i686.rpm libssh-devel-0:0.10.4-13.el9.x86_64.rpm libssh-0:0.10.4-13.el9.src.rpm

Rocky Linux 9 x86_64 - BaseOS

libssh-0:0.10.4-13.el9.x86_64.rpm libssh-config-0:0.10.4-13.el9.noarch.rpm libssh-debuginfo-0:0.10.4-13.el9.x86_64.rpm libssh-0:0.10.4-13.el9.i686.rpm libssh-debugsource-0:0.10.4-13.el9.x86_64.rpm libssh-0:0.10.4-13.el9.src.rpm

Rocky Linux 9 aarch64 - AppStream

libssh-devel-0:0.10.4-13.el9.aarch64.rpm libssh-0:0.10.4-13.el9.src.rpm

Rocky Linux 9 aarch64 - BaseOS

libssh-debugsource-0:0.10.4-13.el9.aarch64.rpm libssh-debuginfo-0:0.10.4-13.el9.aarch64.rpm libssh-0:0.10.4-13.el9.aarch64.rpm libssh-config-0:0.10.4-13.el9.noarch.rpm libssh-0:0.10.4-13.el9.src.rpm

Rocky Linux 9 s390x - AppStream

libssh-devel-0:0.10.4-13.el9.s390x.rpm libssh-0:0.10.4-13.el9.src.rpm

Rocky Linux 9 s390x - BaseOS

libssh-config-0:0.10.4-13.el9.noarch.rpm libssh-debugsource-0:0.10.4-13.el9.s390x.rpm libssh-debuginfo-0:0.10.4-13.el9.s390x.rpm libssh-0:0.10.4-13.el9.s390x.rpm libssh-0:0.10.4-13.el9.src.rpm

Rocky Linux 9 ppc64le - AppStream

libssh-devel-0:0.10.4-13.el9.ppc64le.rpm libssh-0:0.10.4-13.el9.src.rpm