gpp_maybe Security update for openssh

SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2945

This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the agent was forwarded to an attacker-controlled system. [bsc#1213504, CVE-2023-38408] - Close the right filedescriptor and also close fdh in read_hmac to avoid file descriptor leaks. [bsc#1209536] - Attempts to mitigate instances of secrets lingering in memory after a session exits. [bsc#1186673, bsc#1213004, bsc#1213008]

Release Date

Jul 24 2023
References

Bugzilla: 1186673, 1213004, 1213008, 1209536, 1213504
CVEs: CVE-2023-38408
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Desktop Applications Module 15.5 aarch64

Packages

openssh-askpass-gnome
A GNOME-Based Passphrase Dialog for OpenSSH

8.4p1-150300.3.22.1 lock rpm lock src

Desktop Applications Module 15.5 ppc64le

Packages

openssh-askpass-gnome
A GNOME-Based Passphrase Dialog for OpenSSH

8.4p1-150300.3.22.1 lock rpm lock src

Desktop Applications Module 15.5 s390x

Packages

openssh-askpass-gnome
A GNOME-Based Passphrase Dialog for OpenSSH

8.4p1-150300.3.22.1 lock rpm lock src

Desktop Applications Module 15.5 x86_64

Packages

openssh-askpass-gnome
A GNOME-Based Passphrase Dialog for OpenSSH

8.4p1-150300.3.22.1 lock rpm lock src