SUSE-SU-2020:3866-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2020:3866-1

Related

Published

2020-12-17T11:06:21Z

Modified

2020-12-17T11:06:21Z

Summary

Security update for openssh

Details

This update for openssh fixes the following issues:

CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513).
Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install (bsc#1142000)
Fixed an issue where oracle cluster with cluvfy using 'scp' failing/missinterpreted (bsc#1148566).
Fixed sshd termination of multichannel sessions with non-root users (bsc#1115550,bsc#1174162).
Added speculative hardening for key storage (bsc#1139398).

References

Affected packages

Name: openssh
Purl: pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.9p1-6.22.1

{
    "binaries": [
        {
            "openssh-helpers": "7.9p1-6.22.1",
            "openssh": "7.9p1-6.22.1"
        }
    ]
}

Name: openssh-askpass-gnome
Purl: pkg:rpm/suse/openssh-askpass-gnome&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.9p1-6.22.1

{
    "binaries": [
        {
            "openssh-askpass-gnome": "7.9p1-6.22.1"
        }
    ]
}

Name: openssh
Purl: pkg:rpm/suse/openssh&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.9p1-6.22.1

{
    "binaries": [
        {
            "openssh-fips": "7.9p1-6.22.1"
        }
    ]
}