shield Security update for openssh

SUSE-SLE-Module-Server-Applications-15-SP1-2020-3866

This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513). - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install (bsc#1142000) - Fixed an issue where oracle cluster with cluvfy using "scp" failing/missinterpreted (bsc#1148566). - Fixed sshd termination of multichannel sessions with non-root users (bsc#1115550,bsc#1174162). - Added speculative hardening for key storage (bsc#1139398).

• Release Date
  Dec 17 2020
• References
  Bugzilla: 1174162, 1139398, 1148566, 1173513, 1115550, 1142000
  CVEs: CVE-2020-14145
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.1 x86_64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  7.9p1-6.22.1 lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  7.9p1-6.22.1 lock rpm

Server Applications Module 15.1 s390x

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  7.9p1-6.22.1 lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  7.9p1-6.22.1 lock rpm

Server Applications Module 15.1 ppc64le

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  7.9p1-6.22.1 lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  7.9p1-6.22.1 lock rpm

Server Applications Module 15.1 aarch64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  7.9p1-6.22.1 lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  7.9p1-6.22.1 lock rpm