tocsin

Debian/libssh: high 8.1

A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partiall

Action: Upgrade libssh to 0.10.6-0+deb12u2 or later.

Affected

introducedfixedlast affected
00.10.6-0+deb12u2-

Fixed versions

0.10.6-0+deb12u2

Sources

published · modified · JSON