shield Security update for openssh

SUSE-SLE-SAP-12-2016-1332

This update for openssh fixes the following issues: - Prevent user enumeration through the timing of password processing (bsc#989363, CVE-2016-6210) [-prevent_timing_user_enumeration] - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used (bsc#948902) - limit accepted password length (prevents possible DoS) (bsc#992533, CVE-2016-6515) Bug fixes: - avoid complaining about unset DISPLAY variable (bsc#981654)

• Release Date
  Sep 9 2016
• References
  Bugzilla: 989363, 948902, 992533, 981654
  CVEs: CVE-2016-6210, CVE-2016-6515
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12 x86_64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  6.6p1-52.1 lock rpm lock src

  openssh-askpass-gnome
  A GNOME-Based Passphrase Dialog for OpenSSH

  6.6p1-52.1 lock rpm lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  6.6p1-52.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  6.6p1-52.1 lock rpm