shield
Security update for openssh
SUSE-SLE-SERVER-12-SP1-2016-818
This update for OpenSSH fixes three security issues. These security issues were fixed: - CVE-2016-3115: Sanitise input for xauth(1) (bsc#970632) - CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections (bsc#962313) - CVE-2015-8325: Ignore PAM environment when using login (bsc#975865) These non-security issues were fixed: - Fix help output of sftp (bsc#945493) - Restarting openssh with openssh-fips installed was not working correctly (bsc#945484) - Fix crashes when /proc is not available in the chroot (bsc#947458) - Correctly parse GSSAPI KEX algorithms (bsc#961368) - More verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414) - Fix PRNG re-seeding (bsc#960414, bsc#729190) - Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902)
-
Release DateMay 23 2016
-
ReferencesBugzilla: 945493, 945484, 947458, 729190, 932483, 948902, 960414, 961368, 962313, 965576, 970632, 975865
CVEs: CVE-2015-8325, CVE-2016-1908, CVE-2016-3115 -
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server 12.1 s390x
-
Packagesopenssh
Secure Shell Client and Server (Remote Login Program)openssh-askpass-gnome6.6p1-42.1 lock rpm lock src
A GNOME-Based Passphrase Dialog for OpenSSHopenssh-fips6.6p1-42.1 lock rpm lock src
OpenSSH FIPS cryptomodule HMACsopenssh-helpers6.6p1-42.1 lock rpm
OpenSSH AuthorizedKeysCommand helpers6.6p1-42.1 lock rpm
SUSE Linux Enterprise Server 12.1 ppc64le
-
Packagesopenssh
Secure Shell Client and Server (Remote Login Program)openssh-askpass-gnome6.6p1-42.1 lock rpm lock src
A GNOME-Based Passphrase Dialog for OpenSSHopenssh-fips6.6p1-42.1 lock rpm lock src
OpenSSH FIPS cryptomodule HMACsopenssh-helpers6.6p1-42.1 lock rpm
OpenSSH AuthorizedKeysCommand helpers6.6p1-42.1 lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64
-
Packagesopenssh
Secure Shell Client and Server (Remote Login Program)openssh-askpass-gnome6.6p1-42.1 lock rpm lock src
A GNOME-Based Passphrase Dialog for OpenSSHopenssh-fips6.6p1-42.1 lock rpm lock src
OpenSSH FIPS cryptomodule HMACsopenssh-helpers6.6p1-42.1 lock rpm
OpenSSH AuthorizedKeysCommand helpers6.6p1-42.1 lock rpm