SUSE-SU-2018:2275-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 09 Aug 2018, 13:56
Last modified:04 Feb 2026, 03:32

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Aug 2018, 13:56
Published
Vulnerability first disclosed
04 Feb 2026, 03:32
Last Modified
Vulnerability information updated

Description

Security update for openssh This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-10012: Fix pre-auth compression checks that could be optimized away (bsc#1016370). - CVE-2016-10708: Fix remote denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYSmessage (bsc#1076957). - CVE-2017-15906: Fix r/o sftp-server zero byte file creation (bsc#1065000). - CVE-2008-1483: Fix accidental re-introduction of CVE-2008-1483 (bsc#1069509). Bug fixes: - bsc#1017099: Match conditions with uppercase hostnames fail (bsc#1017099) - bsc#1053972: supportedKeyExchanges diffie-hellman-group1-sha1 is duplicated (bsc#1053972) - bsc#1023275: Messages suppressed after upgrade from SLES 11 SP3 to SP4 (bsc#1023275)

Affected Systems

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server 11 SP4

    < 6.6p1-36.3.1

  • suse•openssh-askpass-gnome&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4

    < 6.6p1-36.3.1

  • suse•openssh&distro=SUSE Linux Enterprise Server 11 SP4

    < 6.6p1-36.3.1

  • suse•openssh&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4

    < 6.6p1-36.3.1

References (12)