SUSE-SU-2017:3230-1
Vulnerability Summary
Timeline
Description
Security update for openssh This update for openssh fixes the following issues: Security issue fixed: - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server (bsc#1065000). Bug fixes: - FIPS: Startup selfchecks (bsc#1068310). - FIPS: Silent complaints about unsupported key exchange methods (bsc#1006166). - Refine handling of sockets for X11 forwarding to remove reintroduced CVE-2008-1483 (bsc#1069509). - Test configuration before running daemon to prevent looping resulting in service shutdown (bsc#1048367)
Affected Systems
- suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Desktop 12 SP2
< 7.2p2-74.11.3
- suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Desktop 12 SP3
< 7.2p2-74.11.3
- suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 12 SP2
< 7.2p2-74.11.3
- suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 12 SP3
< 7.2p2-74.11.3
- suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
< 7.2p2-74.11.3
- suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2
< 7.2p2-74.11.3
- suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3
< 7.2p2-74.11.3
- suse•openssh&distro=SUSE Linux Enterprise Desktop 12 SP2
< 7.2p2-74.11.1
- suse•openssh&distro=SUSE Linux Enterprise Desktop 12 SP3
< 7.2p2-74.11.1
- suse•openssh&distro=SUSE Linux Enterprise Server 12 SP2
< 7.2p2-74.11.1
- suse•openssh&distro=SUSE Linux Enterprise Server 12 SP3
< 7.2p2-74.11.1
- suse•openssh&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
< 7.2p2-74.11.1
- suse•openssh&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2
< 7.2p2-74.11.1
- suse•openssh&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3
< 7.2p2-74.11.1
References (8)
- https://www.suse.com/support/update/announcement/2017/suse-su-20173230-1/
- https://bugzilla.suse.com/1006166
- https://bugzilla.suse.com/1048367
- https://bugzilla.suse.com/1065000
- https://bugzilla.suse.com/1068310
- https://bugzilla.suse.com/1069509
- https://www.suse.com/security/cve/CVE-2008-1483
- https://www.suse.com/security/cve/CVE-2017-15906