tocsin

Debian/libssh: medium 4.5

There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() functi

Action: Upgrade libssh to 0.10.6-0+deb12u2 or later.

Affected

introducedfixedlast affected
00.10.6-0+deb12u2-

Fixed versions

0.10.6-0+deb12u2

Sources

published · modified · JSON