Oval Definition:oval:org.opensuse.security:def:57629
Revision Date:2020-12-01Version:1
Title:Security update for openssh (Critical)
Description:



This update for openssh fixes the following issues:

- CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the roaming feature (bsc#961645)

This update disables the undocumented feature supported by the OpenSSH client and a commercial SSH server.
Family:unixClass:patch
Status:Reference(s):1021315
1026236
1027197
1046853
1046858
1047964
1047965
1049344
1097108
1099306
1102682
1103203
1109961
1111331
1114988
1122292
1122293
1122299
1123157
1126140
1126141
1126192
1126195
1126196
1126198
1126201
1127400
1128158
1129623
1131595
1135273
1141322
1158527
1159819
1160968
961642
961645
CVE-2009-2911
CVE-2009-4273
CVE-2009-5044
CVE-2009-5080
CVE-2009-5081
CVE-2010-0411
CVE-2010-0412
CVE-2012-0037
CVE-2013-1986
CVE-2014-3430
CVE-2016-0777
CVE-2016-0778
CVE-2016-10164
CVE-2016-7947
CVE-2016-7948
CVE-2017-10684
CVE-2017-10685
CVE-2017-11112
CVE-2017-11113
CVE-2017-18344
CVE-2017-6318
CVE-2018-10853
CVE-2018-11212
CVE-2018-11763
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2018-1890
CVE-2018-19967
CVE-2018-3646
CVE-2018-5390
CVE-2019-11091
CVE-2019-11745
CVE-2019-17006
CVE-2019-2422
CVE-2019-2449
CVE-2019-3886
CVE-2019-6778
CVE-2019-9824
CVE-2020-2583
CVE-2020-2590
CVE-2020-2593
CVE-2020-2601
CVE-2020-2604
CVE-2020-2654
CVE-2020-2659
SUSE-SU-2016:0120-1
SUSE-SU-2017:0467-1
SUSE-SU-2017:0713-1
SUSE-SU-2017:2075-1
SUSE-SU-2018:3582-1
SUSE-SU-2019:0617-1
SUSE-SU-2019:0921-1
SUSE-SU-2019:0955-1
SUSE-SU-2019:1438-1
SUSE-SU-2020:0088-1
SUSE-SU-2020:0261-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • libldb1-1.2.3-lp150.1 is installed
  • OR python-ldb-1.2.3-lp150.1 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • exim-4.88-lp151.4.3 is installed
  • OR eximon-4.88-lp151.4.3 is installed
  • OR eximstats-html-4.88-lp151.4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • openssh-6.6p1-16 is installed
  • OR openssh-askpass-gnome-6.6p1-16 is installed
  • OR openssh-helpers-6.6p1-16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND sane-backends-1.0.24-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • libfreebl3-3.47.1-58.34 is installed
  • OR libfreebl3-32bit-3.47.1-58.34 is installed
  • OR libfreebl3-hmac-3.47.1-58.34 is installed
  • OR libfreebl3-hmac-32bit-3.47.1-58.34 is installed
  • OR libsoftokn3-3.47.1-58.34 is installed
  • OR libsoftokn3-32bit-3.47.1-58.34 is installed
  • OR libsoftokn3-hmac-3.47.1-58.34 is installed
  • OR libsoftokn3-hmac-32bit-3.47.1-58.34 is installed
  • OR mozilla-nspr-4.23-19.12 is installed
  • OR mozilla-nspr-32bit-4.23-19.12 is installed
  • OR mozilla-nspr-devel-4.23-19.12 is installed
  • OR mozilla-nss-3.47.1-58.34 is installed
  • OR mozilla-nss-32bit-3.47.1-58.34 is installed
  • OR mozilla-nss-certs-3.47.1-58.34 is installed
  • OR mozilla-nss-certs-32bit-3.47.1-58.34 is installed
  • OR mozilla-nss-devel-3.47.1-58.34 is installed
  • OR mozilla-nss-sysinit-3.47.1-58.34 is installed
  • OR mozilla-nss-sysinit-32bit-3.47.1-58.34 is installed
  • OR mozilla-nss-tools-3.47.1-58.34 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • dovecot22-2.2.13-2 is installed
  • OR dovecot22-backend-mysql-2.2.13-2 is installed
  • OR dovecot22-backend-pgsql-2.2.13-2 is installed
  • OR dovecot22-backend-sqlite-2.2.13-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • python3-rpm-4.11.2-16.21 is installed
  • OR rpm-4.11.2-16.21 is installed
  • OR rpm-32bit-4.11.2-16.21 is installed
  • OR rpm-build-4.11.2-16.21 is installed
  • OR rpm-python-4.11.2-16.21 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.171-27.19 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.171-27.19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_103-92_53-default-8-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_16-8-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND apache2-mod_nss-1.0.14-18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.252-27.45 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.252-27.45 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.252-27.45 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.252-27.45 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND ucode-intel-20190618-13.47 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libQtWebKit4-4.8.7+2.3.4-4.7 is installed
  • OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed
  • OR libqca2-2.0.3-17.7 is installed
  • OR libqca2-32bit-2.0.3-17.7 is installed
  • OR libqt4-4.8.7-8.8 is installed
  • OR libqt4-32bit-4.8.7-8.8 is installed
  • OR libqt4-devel-doc-4.8.7-8.8 is installed
  • OR libqt4-qt3support-4.8.7-8.8 is installed
  • OR libqt4-qt3support-32bit-4.8.7-8.8 is installed
  • OR libqt4-sql-4.8.7-8.8 is installed
  • OR libqt4-sql-32bit-4.8.7-8.8 is installed
  • OR libqt4-sql-mysql-4.8.7-8.8 is installed
  • OR libqt4-sql-plugins-4.8.7-8.8 is installed
  • OR libqt4-sql-sqlite-4.8.7-8.8 is installed
  • OR libqt4-x11-4.8.7-8.8 is installed
  • OR libqt4-x11-32bit-4.8.7-8.8 is installed
  • OR qt4-x11-tools-4.8.7-8.8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • bash-4.3-83.15 is installed
  • OR bash-doc-4.3-83.15 is installed
  • OR libreadline6-6.3-83.15 is installed
  • OR libreadline6-32bit-6.3-83.15 is installed
  • OR readline-doc-6.3-83.15 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • apache2-2.4.23-29.27 is installed
  • OR apache2-doc-2.4.23-29.27 is installed
  • OR apache2-example-pages-2.4.23-29.27 is installed
  • OR apache2-prefork-2.4.23-29.27 is installed
  • OR apache2-utils-2.4.23-29.27 is installed
  • OR apache2-worker-2.4.23-29.27 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • libmysqlclient18-10.0.38-29.27 is installed
  • OR mariadb-10.0.38-29.27 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND python-urllib3-1.22-5.6 is installed
    • BACK