gpp_maybe Security update for openssh

SUSE-SLE-Module-Basesystem-15-SP5-2023-2945

This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the agent was forwarded to an attacker-controlled system. [bsc#1213504, CVE-2023-38408] - Close the right filedescriptor and also close fdh in read_hmac to avoid file descriptor leaks. [bsc#1209536] - Attempts to mitigate instances of secrets lingering in memory after a session exits. [bsc#1186673, bsc#1213004, bsc#1213008]

• Release Date
  Jul 24 2023
• References
  Bugzilla: 1186673, 1213004, 1213008, 1209536, 1213504
  CVEs: CVE-2023-38408
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.5 aarch64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  8.4p1-150300.3.22.1 lock rpm lock src

  openssh-clients
  SSH (Secure Shell) client applications

  8.4p1-150300.3.22.1 lock rpm

  openssh-common
  SSH (Secure Shell) common files

  8.4p1-150300.3.22.1 lock rpm

  openssh-fips
  OpenSSH FIPS crypto module HMACs

  8.4p1-150300.3.22.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  8.4p1-150300.3.22.1 lock rpm

  openssh-server
  SSH (Secure Shell) server

  8.4p1-150300.3.22.1 lock rpm

Basesystem Module 15.5 s390x

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  8.4p1-150300.3.22.1 lock rpm lock src

  openssh-clients
  SSH (Secure Shell) client applications

  8.4p1-150300.3.22.1 lock rpm

  openssh-common
  SSH (Secure Shell) common files

  8.4p1-150300.3.22.1 lock rpm

  openssh-fips
  OpenSSH FIPS crypto module HMACs

  8.4p1-150300.3.22.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  8.4p1-150300.3.22.1 lock rpm

  openssh-server
  SSH (Secure Shell) server

  8.4p1-150300.3.22.1 lock rpm

Basesystem Module 15.5 ppc64le

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  8.4p1-150300.3.22.1 lock rpm lock src

  openssh-clients
  SSH (Secure Shell) client applications

  8.4p1-150300.3.22.1 lock rpm

  openssh-common
  SSH (Secure Shell) common files

  8.4p1-150300.3.22.1 lock rpm

  openssh-fips
  OpenSSH FIPS crypto module HMACs

  8.4p1-150300.3.22.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  8.4p1-150300.3.22.1 lock rpm

  openssh-server
  SSH (Secure Shell) server

  8.4p1-150300.3.22.1 lock rpm

Basesystem Module 15.5 x86_64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  8.4p1-150300.3.22.1 lock rpm lock src

  openssh-clients
  SSH (Secure Shell) client applications

  8.4p1-150300.3.22.1 lock rpm

  openssh-common
  SSH (Secure Shell) common files

  8.4p1-150300.3.22.1 lock rpm

  openssh-fips
  OpenSSH FIPS crypto module HMACs

  8.4p1-150300.3.22.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  8.4p1-150300.3.22.1 lock rpm

  openssh-server
  SSH (Secure Shell) server

  8.4p1-150300.3.22.1 lock rpm