FlawAtlas
Search the atlas
SUSE-SU-2016:0718-1 Not scored

Security update for libssh2_org

This update for libssh2_org fixes the following issues: Security issue fixed: - CVE-2016-0787 (bsc#967026): Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. A feature was added: - Support of SHA256 digests for DH group exchanges was added (fate#320343, bsc#961964) Bug fixed: - Properly detect EVP_aes_128_ctr at configure time (bsc#933336)

Exploit probability Not scored
Published March 11, 2016
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Software Development Kit 12 SP1 libssh2_org
SUSE:Linux Enterprise Desktop 12 libssh2_org
SUSE:Linux Enterprise Desktop 12 SP1 libssh2_org
SUSE:Linux Enterprise Server 12 libssh2_org
SUSE:Linux Enterprise Server 12 SP1 libssh2_org
SUSE:Linux Enterprise Server for SAP Applications 12 libssh2_org
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 libssh2_org
SUSE:Linux Enterprise Software Development Kit 12 libssh2_org

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2016:0718-1

This update for libssh2_org fixes the following issues: Security issue fixed: - CVE-2016-0787 (bsc#967026): Weakness in diffie-hellman secret key generation lead to much shorter DH groups then needed, which could be used to retrieve server keys. A feature was added: - Support of SHA256 digests for DH group exchanges was added (fate#320343, bsc#961964) Bug fixed: - Properly detect EVP_aes_128_ctr at configure time (bsc#933336)

View original source

05 / REFERENCES

Further evidence