[El-errata] ELSA-2024-0628 Moderate: Oracle Linux 8 libssh security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2024-0628

http://linux.oracle.com/errata/ELSA-2024-0628.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libssh-0.9.6-13.el8_9.i686.rpm
libssh-0.9.6-13.el8_9.x86_64.rpm
libssh-config-0.9.6-13.el8_9.noarch.rpm
libssh-devel-0.9.6-13.el8_9.i686.rpm
libssh-devel-0.9.6-13.el8_9.x86_64.rpm

aarch64:
libssh-0.9.6-13.el8_9.aarch64.rpm
libssh-config-0.9.6-13.el8_9.noarch.rpm
libssh-devel-0.9.6-13.el8_9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//libssh-0.9.6-13.el8_9.src.rpm

Related CVEs:

CVE-2023-48795




Description of changes:

[0.9.6-13]
- Client and Server side mitigations (CVE-2023-48795)
- Strip extensions from both kex lists for matching (CVE-2023-48795)
- tests: Adjust calculation to strict kex (CVE-2023-48795)