CVE ID:	CVE-2016-0787
Description:	The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
Test IDs:	1.3.6.1.4.1.25623.1.0.882419   1.3.6.1.4.1.25623.1.1.4.2017.2699.1   1.3.6.1.4.1.25623.1.1.4.2016.0718.1   1.3.6.1.4.1.25623.1.0.120673   1.3.6.1.4.1.25623.1.0.122893   1.3.6.1.4.1.25623.1.0.807424   1.3.6.1.4.1.25623.1.1.4.2016.0723.1   1.3.6.1.4.1.25623.1.0.882417   1.3.6.1.4.1.25623.1.0.871571   1.3.6.1.4.1.25623.1.0.703487   1.3.6.1.4.1.25623.1.0.807491   1.3.6.1.4.1.25623.1.1.10.2016.0392   1.3.6.1.4.1.25623.1.1.2.2016.1005   1.3.6.1.4.1.25623.1.1.4.2017.2700.1   1.3.6.1.4.1.25623.1.1.1.2.2016.426
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0787 BugTraq ID: 82514 http://www.securityfocus.com/bid/82514 Debian Security Information: DSA-3487 (Google Search) http://www.debian.org/security/2016/dsa-3487 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177980.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178573.html https://security.gentoo.org/glsa/201606-12 SuSE Security Announcement: openSUSE-SU-2016:0639 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html