SUSE-SU-2017:0606-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 06 Mar 2017, 07:28
Last modified:04 Feb 2026, 03:17

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Mar 2017, 07:28
Published
Vulnerability first disclosed
04 Feb 2026, 03:17
Last Modified
Vulnerability information updated

Description

Security update for openssh This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366) - CVE-2016-10011: Prevent possible leaks of host private keys to low-privilege process handling authentication (bsc#1016369) Non security issues fixed: - Properly verify CIDR masks in the AllowUsers and DenyUsers configuration lists (bsc#1005893)

Affected Systems

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Point of Sale 11 SP3

    < 6.2p2-0.40.3

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 11 SP3-LTSS

    < 6.2p2-0.40.3

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA

    < 6.2p2-0.40.3

  • suse•openssh-askpass-gnome&distro=SUSE Manager 2.1

    < 6.2p2-0.40.3

  • suse•openssh-askpass-gnome&distro=SUSE Manager Proxy 2.1

    < 6.2p2-0.40.3

  • suse•openssh-askpass-gnome&distro=SUSE OpenStack Cloud 5

    < 6.2p2-0.40.3

  • suse•openssh&distro=SUSE Linux Enterprise Point of Sale 11 SP3

    < 6.2p2-0.40.1

  • suse•openssh&distro=SUSE Linux Enterprise Server 11 SP3-LTSS

    < 6.2p2-0.40.1

  • suse•openssh&distro=SUSE Linux Enterprise Server 11 SP3-TERADATA

    < 6.2p2-0.40.1

  • suse•openssh&distro=SUSE Manager 2.1

    < 6.2p2-0.40.1

  • suse•openssh&distro=SUSE Manager Proxy 2.1

    < 6.2p2-0.40.1

  • suse•openssh&distro=SUSE OpenStack Cloud 5

    < 6.2p2-0.40.1

References (8)