SUSE-SU-2019:1524-1: openssh-askpass-gnome&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2019:1524-1 is a vulnerability in openssh-askpass-gnome&distro=SUSE Enterprise Storage 4 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 17-06-2019
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for openssh This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers (bsc#1121816). - CVE-2019-6111: Properly validate object names received by the scp client to prevent arbitrary file overwrites when interacting with a malicious SSH server (bsc#1121821). Other issues fixed: - Fixed two race conditions in sshd relating to SIGHUP (bsc#1119183). - Returned proper reason for port forwarding failures (bsc#1090671). - Fixed a double free() in the KDF CAVS testing tool (bsc#1065237).

No weakness data has been published for this record.