< back to search

shield Security update for openssh
slessp4-openssh-12603

openssh was updated to fix three security issues. These security issues were fixed: - CVE-2016-3115: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH allowed remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions (bsc#970632). - CVE-2016-1908: Possible fallback from untrusted to trusted X11 forwarding (bsc#962313). - CVE-2015-8325: Ignore PAM environment vars when UseLogin=yes (bsc#975865). These non-security issues were fixed: - Correctly parse GSSAPI KEX algorithms (bsc#961368) - More verbose FIPS mode/CC related documentation in README.FIPS (bsc#965576, bsc#960414) - Fix PRNG re-seeding (bsc#960414, bsc#729190) - Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902) - Allow empty Match blocks (bsc#961494)

cloud_download Downloads

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
  • Packages
    openssh
    Secure Shell Client and Server (Remote Login Program)
    6.6p1-21.1 lock rpm lock src
    openssh-askpass-gnome
    A GNOME-Based Passphrase Dialog for OpenSSH
    6.6p1-21.3 lock rpm lock src
    openssh-fips
    OpenSSH FIPS cryptomodule HMACs
    6.6p1-21.1 lock rpm
    openssh-helpers
    OpenSSH AuthorizedKeysCommand helpers
    6.6p1-21.1 lock rpm
SUSE Linux Enterprise Server 11.4 i586
  • Packages
    openssh
    Secure Shell Client and Server (Remote Login Program)
    6.6p1-21.1 lock rpm lock src
    openssh-askpass-gnome
    A GNOME-Based Passphrase Dialog for OpenSSH
    6.6p1-21.3 lock rpm lock src
    openssh-fips
    OpenSSH FIPS cryptomodule HMACs
    6.6p1-21.1 lock rpm
    openssh-helpers
    OpenSSH AuthorizedKeysCommand helpers
    6.6p1-21.1 lock rpm
SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
  • Packages
    openssh
    Secure Shell Client and Server (Remote Login Program)
    6.6p1-21.1 lock rpm lock src
    openssh-askpass-gnome
    A GNOME-Based Passphrase Dialog for OpenSSH
    6.6p1-21.3 lock rpm lock src
    openssh-fips
    OpenSSH FIPS cryptomodule HMACs
    6.6p1-21.1 lock rpm
    openssh-helpers
    OpenSSH AuthorizedKeysCommand helpers
    6.6p1-21.1 lock rpm
SUSE Linux Enterprise Server 11.4 ia64
  • Packages
    openssh
    Secure Shell Client and Server (Remote Login Program)
    6.6p1-21.1 lock rpm lock src
    openssh-askpass-gnome
    A GNOME-Based Passphrase Dialog for OpenSSH
    6.6p1-21.3 lock rpm lock src
    openssh-fips
    OpenSSH FIPS cryptomodule HMACs
    6.6p1-21.1 lock rpm
    openssh-helpers
    OpenSSH AuthorizedKeysCommand helpers
    6.6p1-21.1 lock rpm
SUSE Linux Enterprise Server 11.4 s390x
  • Packages
    openssh
    Secure Shell Client and Server (Remote Login Program)
    6.6p1-21.1 lock rpm lock src
    openssh-askpass-gnome
    A GNOME-Based Passphrase Dialog for OpenSSH
    6.6p1-21.3 lock rpm lock src
    openssh-fips
    OpenSSH FIPS cryptomodule HMACs
    6.6p1-21.1 lock rpm
    openssh-helpers
    OpenSSH AuthorizedKeysCommand helpers
    6.6p1-21.1 lock rpm