Test Kennung:	1.3.6.1.4.1.25623.1.1.13.2016.057.01
Kategorie:	Slackware Local Security Checks
Titel:	Slackware: Security Advisory (SSA:2016-057-01)
Zusammenfassung:	The remote host is missing an update for the 'libssh' package(s) announced via the SSA:2016-057-01 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libssh' package(s) announced via the SSA:2016-057-01 advisory. Vulnerability Insight: New libssh packages are available for Slackware 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/libssh-0.7.3-i486-1_slack14.1.txz: Upgraded. Fixed weak key generation. Due to a bug in the ephemeral secret key generation for the diffie-hellman-group1 and diffie-hellman-group14 methods, ephemeral secret keys of size 128 bits are generated, instead of the recommended sizes of 1024 and 2048 bits, giving a practical security of 63 bits. For more information, see: [link moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'libssh' package(s) on Slackware 14.0, Slackware 14.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0739 Debian Security Information: DSA-3488 (Google Search) http://www.debian.org/security/2016/dsa-3488 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178058.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178822.html https://security.gentoo.org/glsa/201606-12 RedHat Security Advisories: RHSA-2016:0566 http://rhn.redhat.com/errata/RHSA-2016-0566.html SuSE Security Announcement: openSUSE-SU-2016:0880 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-03/msg00111.html http://www.ubuntu.com/usn/USN-2912-1
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.