offline package for sshlib - CVE-2018-10933.

lhg77 · 11-10-2018, 07:06 AM

Hi

I are running Redhat enterprise linux on a few servers (mostly v7)

I are unable give them internet access, but I need to apply the patch for CVE-2018-10933.

https://www.libssh.org/2018/10/16/li...ugfix-release/

I can find the source code here, but I am really looking for the packages.
https://www.libssh.org/files/0.8/

Does anyone know where I can find the packages? or any suggestion on how to install the patch?

Regards
Lhg77

TB0ne · 11-10-2018, 08:15 AM

Quote:

Originally Posted by lhg77

Hi
I are running Redhat enterprise linux on a few servers (mostly v7) I are unable give them internet access, but I need to apply the patch for CVE-2018-10933.

https://www.libssh.org/2018/10/16/li...ugfix-release/

I can find the source code here, but I am really looking for the packages.
https://www.libssh.org/files/0.8/

Does anyone know where I can find the packages? or any suggestion on how to install the patch?

Yes, you get them from Red Hat. Since you're running RHEL, you should also be PAYING FOR IT, and when you do, you will get these security fixes, and the ability to download them as you'd like. Contact RHEL support, and they can get you what you need. Check the RHEL knowlegebase to see if what you have is even affected...because there is an article out there dealing with this CVE.

lhg77 · 11-11-2018, 01:20 PM

hi
Thanks, and yes we are paying for support :-)

I am bit new, do you have a link to the article ?

Regards
Lhg

TB0ne · 11-12-2018, 07:09 AM

Quote:

Originally Posted by lhg77

hi
Thanks, and yes we are paying for support :-) I am bit new, do you have a link to the article ?

Sorry, no...you can look this up for yourself, in less time than it took you to ask someone else to look it up for you. Red Hat's knowledgebase is available to you, and again (since you're paying for support), you can pick up the phone and call them. They can direct you to the article, or explain things to you.