You are here
Home > Preporuke > Sigurnosni nedostatak programske biblioteke libssh

Sigurnosni nedostatak programske biblioteke libssh

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LUB

==========================================================================
Ubuntu Security Notice USN-3795-1
October 17, 2018

libssh vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

libssh could allow unintended access to network services.

Software Description:
– libssh: A tiny C SSH library

Details:

Peter Winter-Smith discovered that libssh incorrectly handled
authentication when being used as a server. A remote attacker could use
this issue to bypass authentication without any credentials.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
libssh-4 0.8.0~20170825.94fa1e38-1ubuntu0.1

Ubuntu 16.04 LTS:
libssh-4 0.6.3-4.3ubuntu0.1

Ubuntu 14.04 LTS:
libssh-4 0.6.1-0ubuntu3.4

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://usn.ubuntu.com/usn/usn-3795-1
CVE-2018-10933

Package Information:
https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.1
https://launchpad.net/ubuntu/+source/libssh/0.6.1-0ubuntu3.4

—–BEGIN PGP SIGNATURE—–
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=3PaM
—–END PGP SIGNATURE—–

AutorZvonimir Bosnjak
Cert idNCERT-REF-2018-10-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa Red Hat JBoss Operations Network

Otkriveni su sigurnosni nedostaci u programskom paketu Red Hat JBoss Operations Network. Otkriveni nedostaci potencijalnim napadačima omogućuju zaobilaženje sigurnosnih ograničenja,...

Close