shield Security update for openssh

slessp4-openssh-13719

This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-10012: Fix pre-auth compression checks that could be optimized away (bsc#1016370). - CVE-2016-10708: Fix remote denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYSmessage (bsc#1076957). - CVE-2017-15906: Fix r/o sftp-server zero byte file creation (bsc#1065000). - CVE-2008-1483: Fix accidental re-introduction of CVE-2008-1483 (bsc#1069509). Bug fixes: - bsc#1017099: Match conditions with uppercase hostnames fail (bsc#1017099) - bsc#1053972: supportedKeyExchanges diffie-hellman-group1-sha1 is duplicated (bsc#1053972) - bsc#1023275: Messages suppressed after upgrade from SLES 11 SP3 to SP4 (bsc#1023275)

• Release Date
  Aug 9 2018
• References
  Bugzilla: 1017099, 1053972, 1069509, 1016370, 1023275, 1076957, 1065000
  CVEs: CVE-2008-1483, CVE-2016-10708, CVE-2016-10012, CVE-2017-15906
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 i586

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  6.6p1-36.3.1 lock rpm lock src

  openssh-askpass-gnome
  A GNOME-Based Passphrase Dialog for OpenSSH

  6.6p1-36.3.1 lock rpm lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  6.6p1-36.3.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  6.6p1-36.3.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  6.6p1-36.3.1 lock rpm lock src

  openssh-askpass-gnome
  A GNOME-Based Passphrase Dialog for OpenSSH

  6.6p1-36.3.1 lock rpm lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  6.6p1-36.3.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  6.6p1-36.3.1 lock rpm

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  6.6p1-36.3.1 lock rpm lock src

  openssh-askpass-gnome
  A GNOME-Based Passphrase Dialog for OpenSSH

  6.6p1-36.3.1 lock rpm lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  6.6p1-36.3.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  6.6p1-36.3.1 lock rpm

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  6.6p1-36.3.1 lock rpm lock src

  openssh-askpass-gnome
  A GNOME-Based Passphrase Dialog for OpenSSH

  6.6p1-36.3.1 lock rpm lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  6.6p1-36.3.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  6.6p1-36.3.1 lock rpm

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  6.6p1-36.3.1 lock rpm lock src

  openssh-askpass-gnome
  A GNOME-Based Passphrase Dialog for OpenSSH

  6.6p1-36.3.1 lock rpm lock src

  openssh-fips
  OpenSSH FIPS cryptomodule HMACs

  6.6p1-36.3.1 lock rpm

  openssh-helpers
  OpenSSH AuthorizedKeysCommand helpers

  6.6p1-36.3.1 lock rpm