[Secure-testing-team] Bug#815663: libssh: CVE-2016-0739: Weak Diffie-Hellman secret generation

Salvatore Bonaccorso carnil at debian.org
Tue Feb 23 13:23:59 UTC 2016


Source: libssh
Version: 0.4.5-3
Severity: grave
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for libssh.

CVE-2016-0739[0]:
Weak Diffie-Hellman secret generation in libssh

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-0739
[1] https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/

Regards,
Salvatore



More information about the Secure-testing-team mailing list