------------------------------------------------------------------------- Debian LTS Advisory DLA-3730-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ ; Daniel Leidert February 01, 2024 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : python-asyncssh Version : 1.12.2-1+deb10u1 CVE ID : CVE-2023-48795 Debian Bug : 1059007 AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol. It has been discovered that it is also vulnerable to a prefix truncation attack, better known as Terrapin attack. For Debian 10 buster, this problem has been fixed in version 1.12.2-1+deb10u1. We recommend that you upgrade your python-asyncssh packages. For the detailed security status of python-asyncssh please refer to its security tracker page at: https://security-tracker.debian.org/tracker/python-asyncssh Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: This is a digitally signed message part