Read Time:32 Second

FEDORA-EPEL-2025-206aae91e0

Packages in this update:

libssh2-1.11.1-1.el10_1

Update description:

This update, to the current upstream libssh2 release, addresses a couple of security issues:

CVE-2023-6918 (missing checks for return values for digests)
CVE-2023-48795 (prefix truncation attack on Binary Packet Protocol (BPP) – “Terrapin”)

It also removes support for a number of legacy algorithms that were disabled by default or removed from OpenSSH in the 2015-2018 time period. See the RELEASE_NOTES file for full details.

In addition, there are a large number of bug fixes and enhancements, which again are described in the RELEASE_NOTES file.

Read More

More Stories

redis-7.2.8-1.fc40

FEDORA-2025-290b0c6e2b Packages in this update: redis-7.2.8-1.fc40 Update description: Redis 7.2.8 Released Wed 23 Apr 2025 12:00:00 IST Update urgency: SECURITY:...