Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-48795 (GCVE-0-2023-48795)
Vulnerability from cvelistv5 – Published: 2023-12-18 00:00 – Updated: 2026-05-12 11:02
VLAI
EPSS
Summary
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.
Severity
5.9 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- n/a
- CWE-354 - Improper Validation of Integrity Check Value
Assigner
References
139 references
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Siemens | RUGGEDCOM APE1808 |
Affected:
0 , < *
(custom)
|
|
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
|
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
|
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-04T22:05:21.417Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit"
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://matt.ucc.asn.au/dropbear/CHANGES"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.netsarang.com/en/xshell-update-history/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.paramiko.org/changelog.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openssh.com/openbsd.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openssh/openssh-portable/commits/master"
},
{
"tags": [
"x_transferred"
],
"url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.bitvise.com/ssh-server-version-history"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/ronf/asyncssh/tags"
},
{
"tags": [
"x_transferred"
],
"url": "https://gitlab.com/libssh/libssh-mirror/-/tags"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openssh.com/txt/release-9.6"
},
{
"tags": [
"x_transferred"
],
"url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.terrapin-attack.com"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst"
},
{
"tags": [
"x_transferred"
],
"url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openwall.com/lists/oss-security/2023/12/18/2"
},
{
"tags": [
"x_transferred"
],
"url": "https://twitter.com/TrueSkrillor/status/1736774389725565005"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/paramiko/paramiko/issues/2337"
},
{
"tags": [
"x_transferred"
],
"url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38684904"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38685286"
},
{
"name": "[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/18/3"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mwiede/jsch/issues/457"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/advisories/GHSA-45x7-px36-x8w8"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/source-package/libssh2"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/CVE-2023-48795"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugs.gentoo.org/920280"
},
{
"tags": [
"x_transferred"
],
"url": "https://ubuntu.com/security/CVE-2023-48795"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/"
},
{
"tags": [
"x_transferred"
],
"url": "https://access.redhat.com/security/cve/cve-2023-48795"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mwiede/jsch/pull/461"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/libssh2/libssh2/pull/1291"
},
{
"tags": [
"x_transferred"
],
"url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/rapier1/hpn-ssh/releases"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/issues/456"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15"
},
{
"tags": [
"x_transferred"
],
"url": "https://oryx-embedded.com/download/#changelog"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3"
},
{
"tags": [
"x_transferred"
],
"url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC"
},
{
"tags": [
"x_transferred"
],
"url": "https://crates.io/crates/thrussh/versions"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/NixOS/nixpkgs/pull/275249"
},
{
"name": "[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/19/5"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc"
},
{
"tags": [
"x_transferred"
],
"url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/"
},
{
"name": "[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"tags": [
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/apache/mina-sshd/issues/445"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/hierynomus/sshj/issues/916"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/janmojzis/tinyssh/issues/81"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"tags": [
"x_transferred"
],
"url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16"
},
{
"name": "FEDORA-2023-0733306be9",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
},
{
"name": "DSA-5586",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.debian.org/security/2023/dsa-5586"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh"
},
{
"tags": [
"x_transferred"
],
"url": "https://filezilla-project.org/versions.php"
},
{
"tags": [
"x_transferred"
],
"url": "https://nova.app/releases/#v11.8"
},
{
"tags": [
"x_transferred"
],
"url": "https://roumenpetrov.info/secsh/#news20231220"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.vandyke.com/products/securecrt/history.txt"
},
{
"tags": [
"x_transferred"
],
"url": "https://help.panic.com/releasenotes/transmit5/"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189"
},
{
"tags": [
"x_transferred"
],
"url": "https://winscp.net/eng/docs/history#6.2.2"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.bitvise.com/ssh-client-version-history#933"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/cyd01/KiTTY/issues/520"
},
{
"name": "DSA-5588",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.debian.org/security/2023/dsa-5588"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/ssh-mitm/ssh-mitm/issues/165"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=38732005"
},
{
"name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
},
{
"name": "GLSA-202312-16",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202312-16"
},
{
"name": "GLSA-202312-17",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202312-17"
},
{
"name": "FEDORA-2023-20feb865d8",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
},
{
"name": "FEDORA-2023-cb8c606fbb",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/"
},
{
"name": "FEDORA-2023-e77300e4b5",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
},
{
"name": "FEDORA-2023-b87ec6cf47",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/"
},
{
"name": "FEDORA-2023-153404713b",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240105-0004/"
},
{
"name": "FEDORA-2024-3bb23c77f3",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/"
},
{
"name": "FEDORA-2023-55800423a8",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
},
{
"name": "FEDORA-2024-d946b9ad25",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
},
{
"name": "FEDORA-2024-71c2c6526c",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/"
},
{
"name": "FEDORA-2024-39a8c72ea9",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
},
{
"tags": [
"x_transferred"
],
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002"
},
{
"name": "FEDORA-2024-ae653fb07b",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
},
{
"name": "FEDORA-2024-2705241461",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
},
{
"name": "FEDORA-2024-fb32950d11",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
},
{
"name": "FEDORA-2024-7b08207cdb",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
},
{
"name": "FEDORA-2024-06ebb70bdd",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html"
},
{
"name": "FEDORA-2024-a53b24023d",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
},
{
"name": "FEDORA-2024-3fd1bc9276",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.apple.com/kb/HT214084"
},
{
"name": "20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2024/Mar/21"
},
{
"name": "[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html"
},
{
"name": "[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2024/04/17/8"
},
{
"name": "[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2024/03/06/3"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-48795",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2023-12-22T05:01:05.519910Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-354",
"description": "CWE-354 Improper Validation of Integrity Check Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-27T20:45:57.733Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM APE1808",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-12T11:02:25.905Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-364175.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-01T18:06:23.972Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"
},
{
"url": "https://matt.ucc.asn.au/dropbear/CHANGES"
},
{
"url": "https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES"
},
{
"url": "https://www.netsarang.com/en/xshell-update-history/"
},
{
"url": "https://www.paramiko.org/changelog.html"
},
{
"url": "https://www.openssh.com/openbsd.html"
},
{
"url": "https://github.com/openssh/openssh-portable/commits/master"
},
{
"url": "https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ"
},
{
"url": "https://www.bitvise.com/ssh-server-version-history"
},
{
"url": "https://github.com/ronf/asyncssh/tags"
},
{
"url": "https://gitlab.com/libssh/libssh-mirror/-/tags"
},
{
"url": "https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/"
},
{
"url": "https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42"
},
{
"url": "https://www.openssh.com/txt/release-9.6"
},
{
"url": "https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/"
},
{
"url": "https://www.terrapin-attack.com"
},
{
"url": "https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25"
},
{
"url": "https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst"
},
{
"url": "https://thorntech.com/cve-2023-48795-and-sftp-gateway/"
},
{
"url": "https://github.com/warp-tech/russh/releases/tag/v0.40.2"
},
{
"url": "https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0"
},
{
"url": "https://www.openwall.com/lists/oss-security/2023/12/18/2"
},
{
"url": "https://twitter.com/TrueSkrillor/status/1736774389725565005"
},
{
"url": "https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d"
},
{
"url": "https://github.com/paramiko/paramiko/issues/2337"
},
{
"url": "https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg"
},
{
"url": "https://news.ycombinator.com/item?id=38684904"
},
{
"url": "https://news.ycombinator.com/item?id=38685286"
},
{
"name": "[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/18/3"
},
{
"url": "https://github.com/mwiede/jsch/issues/457"
},
{
"url": "https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6"
},
{
"url": "https://github.com/erlang/otp/releases/tag/OTP-26.2.1"
},
{
"url": "https://github.com/advisories/GHSA-45x7-px36-x8w8"
},
{
"url": "https://security-tracker.debian.org/tracker/source-package/libssh2"
},
{
"url": "https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg"
},
{
"url": "https://security-tracker.debian.org/tracker/CVE-2023-48795"
},
{
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1217950"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254210"
},
{
"url": "https://bugs.gentoo.org/920280"
},
{
"url": "https://ubuntu.com/security/CVE-2023-48795"
},
{
"url": "https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/"
},
{
"url": "https://access.redhat.com/security/cve/cve-2023-48795"
},
{
"url": "https://github.com/mwiede/jsch/pull/461"
},
{
"url": "https://github.com/drakkan/sftpgo/releases/tag/v2.5.6"
},
{
"url": "https://github.com/libssh2/libssh2/pull/1291"
},
{
"url": "https://forum.netgate.com/topic/184941/terrapin-ssh-attack"
},
{
"url": "https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5"
},
{
"url": "https://github.com/rapier1/hpn-ssh/releases"
},
{
"url": "https://github.com/proftpd/proftpd/issues/456"
},
{
"url": "https://github.com/TeraTermProject/teraterm/releases/tag/v5.1"
},
{
"url": "https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15"
},
{
"url": "https://oryx-embedded.com/download/#changelog"
},
{
"url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update"
},
{
"url": "https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22"
},
{
"url": "https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab"
},
{
"url": "https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3"
},
{
"url": "https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC"
},
{
"url": "https://crates.io/crates/thrussh/versions"
},
{
"url": "https://github.com/NixOS/nixpkgs/pull/275249"
},
{
"name": "[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/19/5"
},
{
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc"
},
{
"url": "https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/"
},
{
"name": "[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"url": "http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html"
},
{
"url": "https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES"
},
{
"url": "https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES"
},
{
"url": "https://github.com/apache/mina-sshd/issues/445"
},
{
"url": "https://github.com/hierynomus/sshj/issues/916"
},
{
"url": "https://github.com/janmojzis/tinyssh/issues/81"
},
{
"url": "https://www.openwall.com/lists/oss-security/2023/12/20/3"
},
{
"url": "https://security-tracker.debian.org/tracker/source-package/trilead-ssh2"
},
{
"url": "https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16"
},
{
"name": "FEDORA-2023-0733306be9",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/"
},
{
"name": "DSA-5586",
"tags": [
"vendor-advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5586"
},
{
"url": "https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508"
},
{
"url": "https://www.theregister.com/2023/12/20/terrapin_attack_ssh"
},
{
"url": "https://filezilla-project.org/versions.php"
},
{
"url": "https://nova.app/releases/#v11.8"
},
{
"url": "https://roumenpetrov.info/secsh/#news20231220"
},
{
"url": "https://www.vandyke.com/products/securecrt/history.txt"
},
{
"url": "https://help.panic.com/releasenotes/transmit5/"
},
{
"url": "https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta"
},
{
"url": "https://github.com/PowerShell/Win32-OpenSSH/issues/2189"
},
{
"url": "https://winscp.net/eng/docs/history#6.2.2"
},
{
"url": "https://www.bitvise.com/ssh-client-version-history#933"
},
{
"url": "https://github.com/cyd01/KiTTY/issues/520"
},
{
"name": "DSA-5588",
"tags": [
"vendor-advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5588"
},
{
"url": "https://github.com/ssh-mitm/ssh-mitm/issues/165"
},
{
"url": "https://news.ycombinator.com/item?id=38732005"
},
{
"name": "[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html"
},
{
"name": "GLSA-202312-16",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202312-16"
},
{
"name": "GLSA-202312-17",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202312-17"
},
{
"name": "FEDORA-2023-20feb865d8",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/"
},
{
"name": "FEDORA-2023-cb8c606fbb",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/"
},
{
"name": "FEDORA-2023-e77300e4b5",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/"
},
{
"name": "FEDORA-2023-b87ec6cf47",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/"
},
{
"name": "FEDORA-2023-153404713b",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240105-0004/"
},
{
"name": "FEDORA-2024-3bb23c77f3",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/"
},
{
"name": "FEDORA-2023-55800423a8",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/"
},
{
"name": "FEDORA-2024-d946b9ad25",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/"
},
{
"name": "FEDORA-2024-71c2c6526c",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/"
},
{
"name": "FEDORA-2024-39a8c72ea9",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/"
},
{
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002"
},
{
"name": "FEDORA-2024-ae653fb07b",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/"
},
{
"name": "FEDORA-2024-2705241461",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/"
},
{
"name": "FEDORA-2024-fb32950d11",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/"
},
{
"name": "FEDORA-2024-7b08207cdb",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/"
},
{
"name": "FEDORA-2024-06ebb70bdd",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html"
},
{
"name": "[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html"
},
{
"name": "FEDORA-2024-a53b24023d",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/"
},
{
"name": "FEDORA-2024-3fd1bc9276",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/"
},
{
"url": "https://support.apple.com/kb/HT214084"
},
{
"name": "20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4",
"tags": [
"mailing-list"
],
"url": "http://seclists.org/fulldisclosure/2024/Mar/21"
},
{
"name": "[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html"
},
{
"name": "[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2024/04/17/8"
},
{
"name": "[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2024/03/06/3"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-48795",
"datePublished": "2023-12-18T00:00:00.000Z",
"dateReserved": "2023-11-20T00:00:00.000Z",
"dateUpdated": "2026-05-12T11:02:25.905Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-48795",
"date": "2026-06-05",
"epss": "0.54214",
"percentile": "0.98065"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-48795\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2023-12-18T16:15:10.897\",\"lastModified\":\"2026-05-12T11:16:15.010\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.\"},{\"lang\":\"es\",\"value\":\"El protocolo de transporte SSH con ciertas extensiones OpenSSH, que se encuentra en OpenSSH anterior a 9.6 y otros productos, permite a atacantes remotos eludir las comprobaciones de integridad de modo que algunos paquetes se omiten (del mensaje de negociaci\u00f3n de extensi\u00f3n) y, en consecuencia, un cliente y un servidor pueden terminar con una conexi\u00f3n para la cual algunas caracter\u00edsticas de seguridad han sido degradadas o deshabilitadas, tambi\u00e9n conocido como un ataque Terrapin. Esto ocurre porque SSH Binary Packet Protocol (BPP), implementado por estas extensiones, maneja mal la fase de protocolo de enlace y el uso de n\u00fameros de secuencia. Por ejemplo, existe un ataque eficaz contra ChaCha20-Poly1305 (y CBC con Encrypt-then-MAC). La omisi\u00f3n se produce en chacha20-poly1305@openssh.com y (si se utiliza CBC) en los algoritmos MAC -etm@openssh.com. Esto tambi\u00e9n afecta a Maverick Synergy Java SSH API anterior a 3.1.0-SNAPSHOT, Dropbear hasta 2022.83, Ssh anterior a 5.1.1 en Erlang/OTP, PuTTY anterior a 0.80 y AsyncSSH anterior a 2.14.2; y podr\u00eda haber efectos en Bitvise SSH hasta la versi\u00f3n 9.31, libssh hasta la 0.10.5 y golang.org/x/crypto hasta el 17 de diciembre de 2023.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-354\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-354\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.6\",\"matchCriteriaId\":\"5308FBBB-F738-41C5-97A4-E40118E957CD\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.80\",\"matchCriteriaId\":\"A9D807DB-9E20-4792-8A9F-4BFFC841BAB7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.66.4\",\"matchCriteriaId\":\"42915485-A4DA-48DD-9C15-415D2D39DC52\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"387021A0-AF36-463C-A605-32EA7DAC172E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.10.4\",\"matchCriteriaId\":\"31FFE0AA-FC25-40DE-8EE9-7F4C80ABDE4F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"387021A0-AF36-463C-A605-32EA7DAC172E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"11.8\",\"matchCriteriaId\":\"F2FCF7EF-97D7-44CF-AC74-72D856901755\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"14.4\",\"matchCriteriaId\":\"53CAD263-1C60-43BD-86A2-C8DB15FFB4C6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.2.2\",\"matchCriteriaId\":\"8FA57F20-C9C1-40A7-B2CD-F3440CCF1D66\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.33\",\"matchCriteriaId\":\"6209E375-10C7-4E65-A2E7-455A686717AC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.32\",\"matchCriteriaId\":\"1A05CC3C-19C5-4BAA-ABA2-EE1795E0BE81\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.66.4\",\"matchCriteriaId\":\"3A71B523-0778-46C6-A38B-64452E0BB6E7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1C91308-15E5-40AF-B4D5-3CAD7BC65DDF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"418940E3-6DD1-4AA6-846A-03E059D0C681\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"411BA58A-33B6-44CA-B9D6-7F9042D46961\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA17A153-30E4-4731-8706-8F74FCA50993\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB736F57-9BE3-4457-A10E-FA88D0932154\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.4.3\",\"matchCriteriaId\":\"6EB8D02D-87F3-414D-A3EA-43F594DAAC1B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.10.6\",\"matchCriteriaId\":\"AAB481DA-FBFE-4CC2-9AE7-22025FA07494\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:*\",\"matchCriteriaId\":\"3D6FD459-F8E8-4126-8097-D30B4639404A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:*\",\"versionEndIncluding\":\"1.11.0\",\"matchCriteriaId\":\"69510F52-C699-4E7D-87EF-7000682888F0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.3.8b\",\"matchCriteriaId\":\"9461430B-3709-45B6-8858-2101F5AE4481\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"12.4\",\"matchCriteriaId\":\"B9A01DF3-E20E-4F29-B5CF-DDF717D01E74\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.35.1\",\"matchCriteriaId\":\"D25EB73D-6145-4B7D-8F14-80FD0B458E99\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1\",\"matchCriteriaId\":\"77594DEC-B5F7-4911-A13D-FFE91C74BAFA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.3.4\",\"matchCriteriaId\":\"F8FF7E74-2351-4CD9-B717-FA28893293A1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.6.0\",\"matchCriteriaId\":\"82A93C12-FEB6-4E82-B283-0ED7820D807E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"build__0144\",\"matchCriteriaId\":\"B480AE79-2FA1-4281-9F0D-0DE812B9354D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.4.0\",\"matchCriteriaId\":\"826B6323-06F8-4B96-8771-3FA15A727B08\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"932D137F-528B-4526-9A89-CD59FA1AB0FE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCC81071-B46D-4F5D-AC25-B4A4CCC20C73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B3000D2-35DF-4A93-9FC0-1AD3AB8349B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E315FC5C-FF19-43C9-A58A-CF2A5FF13824\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA7EAD12-E398-44AF-9859-F3CA6C63BA6B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77675CB7-67D7-44E9-B7FF-D224B3341AA5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0AAA300-691A-4957-8B69-F6888CC971B1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45937289-2D64-47CB-A750-5B4F0D4664A0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97321212-0E07-4CC2-A917-7B5F61AB9A5A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E2C021C-A9F0-4EB4-ADED-81D8B57B4563\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BF8EFFB-5686-4F28-A68F-1A8854E098CE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C877879-B84B-471C-80CF-0656521CA8AB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"379A5883-F6DF-41F5-9403-8D17F6605737\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5B1D946-5978-4818-BF21-A43D9C1365E1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99B8A88B-0B31-4CFF-AFD7-C9D3DDD5790D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D5A7736-A403-4617-8790-18E46CB74DA6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E0DE4E1-5D8D-40F3-8AC8-C7F736966158\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"88BF3B2C-B121-483A-AEF2-8082F6DA5310\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0FD736A-8730-446A-BA3A-7B608DB62B0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4C504B6-3902-46E2-82B7-48AEC9CDD48D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.17.0\",\"matchCriteriaId\":\"F92E56DF-98DF-4328-B37E-4D5744E4103D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:*\",\"versionEndExcluding\":\"0.40.2\",\"matchCriteriaId\":\"AC12508E-3C31-44EA-B4F3-29316BE9B189\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.5.6\",\"matchCriteriaId\":\"1750028C-698D-4E84-B727-8A155A46ADEB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"22.3.4.27\",\"matchCriteriaId\":\"B38C0997-A8CC-473C-98CF-641FD21EB411\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"23.0\",\"versionEndExcluding\":\"23.3.4.20\",\"matchCriteriaId\":\"5887F3E2-9214-4FAE-8768-441D770E27C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"24.0\",\"versionEndExcluding\":\"24.3.4.15\",\"matchCriteriaId\":\"8D7CB988-94C4-45BE-AD9D-9C16899A71DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"25.0\",\"versionEndExcluding\":\"25.3.2.8\",\"matchCriteriaId\":\"EB749F4B-99FC-4AE8-BDB3-85B081B52F82\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:erlang:erlang\\\\/otp:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"26.0\",\"versionEndExcluding\":\"26.2.1\",\"matchCriteriaId\":\"2380909A-BA9B-4A76-82F2-D2D0EF242E57\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.2.15\",\"matchCriteriaId\":\"61119DB3-4336-4D3B-863A-0CCF4146E5C1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.11.1\",\"matchCriteriaId\":\"7BFDD272-3DF0-4E3F-B69A-E7ABF4B18B24\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.14.2\",\"matchCriteriaId\":\"FAE46983-0ABC-49F7-AC18-A78FAC7E73AA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2022.83\",\"matchCriteriaId\":\"06BF3368-F232-4E6B-883E-A591EED5C827\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.1.0-snapshot\",\"matchCriteriaId\":\"36531FB6-5682-4BF1-9785-E9D6D1C4207B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.9.1.5\",\"matchCriteriaId\":\"A86A51EA-B501-42F8-91E6-4EA97DED767C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.11.1.7\",\"matchCriteriaId\":\"70989970-E224-4D1C-941E-BBFB2AE7285C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.12\",\"versionEndExcluding\":\"4.13.2.4\",\"matchCriteriaId\":\"E7819CE3-2849-4D15-874B-F6A68EF6D65F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.14\",\"versionEndExcluding\":\"4.15.3.1\",\"matchCriteriaId\":\"F6A4DD8B-06AD-4F13-8F7E-1E2AAF81C119\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0\",\"versionEndExcluding\":\"5.1.1\",\"matchCriteriaId\":\"D91ED5E1-1D75-4B63-B0A2-B2EB6D4AC685\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.4.6\",\"matchCriteriaId\":\"83B1AF39-C0B9-4031-B19A-BDDD4F337273\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"23.09.1\",\"matchCriteriaId\":\"2B71B0EF-888E-45E2-A055-F59CDCC1AFC7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.7.2\",\"matchCriteriaId\":\"8F23CDF7-2881-4B4E-B84F-4E04F4ED8CCF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.6.0\",\"matchCriteriaId\":\"C1795F7A-203F-400E-B09C-0FAF16D01CFC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.2.22\",\"matchCriteriaId\":\"0D79DDDD-02F0-4C12-BE7F-1B9DF1722C7A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.11.0\",\"matchCriteriaId\":\"E2D7B0CA-C01F-4296-9425-48299E3889C5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.37.0\",\"matchCriteriaId\":\"1C3EB0B8-9E76-4146-AB02-02E20B91D55C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"20230101\",\"matchCriteriaId\":\"0582468A-149B-429F-978A-2AEDF4BE2606\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E4BAF06-5A79-46D7-8C4F-E670BD6B7C2D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.76.1.13\",\"matchCriteriaId\":\"98321BF9-5E8F-4836-842C-47713B1C2775\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76BDAFDE-4515-42E6-820F-38AF4A786CF2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5920923E-0D52-44E5-801D-10B82846ED58\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.0\",\"versionEndExcluding\":\"14.4\",\"matchCriteriaId\":\"73160D1F-755B-46D2-969F-DF8E43BB1099\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Mar/21\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/18/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/19/5\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/03/06/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/04/17/8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://access.redhat.com/security/cve/cve-2023-48795\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://bugs.gentoo.org/920280\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=1217950\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://crates.io/crates/thrussh/versions\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://filezilla-project.org/versions.php\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/NixOS/nixpkgs/pull/275249\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/advisories/GHSA-45x7-px36-x8w8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/apache/mina-sshd/issues/445\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/cyd01/KiTTY/issues/520\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/hierynomus/sshj/issues/916\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/janmojzis/tinyssh/issues/81\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/libssh2/libssh2/pull/1291\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mitigation\"]},{\"url\":\"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\",\"source\":\"cve@mitre.org\",\"tags\":[\"Product\"]},{\"url\":\"https://github.com/mwiede/jsch/issues/457\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/mwiede/jsch/pull/461\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssh/openssh-portable/commits/master\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/paramiko/paramiko/issues/2337\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/issues/456\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/rapier1/hpn-ssh/releases\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/tags\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ssh-mitm/ssh-mitm/issues/165\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/warp-tech/russh/releases/tag/v0.40.2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://gitlab.com/libssh/libssh-mirror/-/tags\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://help.panic.com/releasenotes/transmit5/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://matt.ucc.asn.au/dropbear/CHANGES\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://news.ycombinator.com/item?id=38684904\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38685286\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38732005\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://nova.app/releases/#v11.8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://oryx-embedded.com/download/#changelog\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://roumenpetrov.info/secsh/#news20231220\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://security-tracker.debian.org/tracker/CVE-2023-48795\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/libssh2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-16\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-17\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240105-0004/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214084\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://twitter.com/TrueSkrillor/status/1736774389725565005\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://ubuntu.com/security/CVE-2023-48795\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://winscp.net/eng/docs/history#6.2.2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-client-version-history#933\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-server-version-history\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5586\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5588\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.netsarang.com/en/xshell-update-history/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/openbsd.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/txt/release-9.6\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/18/2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"https://www.paramiko.org/changelog.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.terrapin-attack.com\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\",\"source\":\"cve@mitre.org\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.vandyke.com/products/securecrt/history.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Mar/21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/18/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/19/5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/03/06/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/04/17/8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://access.redhat.com/security/cve/cve-2023-48795\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://bugs.gentoo.org/920280\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=1217950\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://crates.io/crates/thrussh/versions\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://filezilla-project.org/versions.php\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/NixOS/nixpkgs/pull/275249\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/advisories/GHSA-45x7-px36-x8w8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/apache/mina-sshd/issues/445\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/cyd01/KiTTY/issues/520\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/hierynomus/sshj/issues/916\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/janmojzis/tinyssh/issues/81\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/libssh2/libssh2/pull/1291\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mitigation\"]},{\"url\":\"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Product\"]},{\"url\":\"https://github.com/mwiede/jsch/issues/457\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/mwiede/jsch/pull/461\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssh/openssh-portable/commits/master\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/paramiko/paramiko/issues/2337\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/proftpd/proftpd/issues/456\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/rapier1/hpn-ssh/releases\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ronf/asyncssh/tags\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/ssh-mitm/ssh-mitm/issues/165\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/warp-tech/russh/releases/tag/v0.40.2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://gitlab.com/libssh/libssh-mirror/-/tags\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://help.panic.com/releasenotes/transmit5/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://matt.ucc.asn.au/dropbear/CHANGES\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://news.ycombinator.com/item?id=38684904\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38685286\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://news.ycombinator.com/item?id=38732005\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://nova.app/releases/#v11.8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://oryx-embedded.com/download/#changelog\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://roumenpetrov.info/secsh/#news20231220\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://security-tracker.debian.org/tracker/CVE-2023-48795\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/libssh2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-17\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240105-0004/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214084\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://twitter.com/TrueSkrillor/status/1736774389725565005\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://ubuntu.com/security/CVE-2023-48795\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://winscp.net/eng/docs/history#6.2.2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-client-version-history#933\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.bitvise.com/ssh-server-version-history\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5586\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.debian.org/security/2023/dsa-5588\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.netsarang.com/en/xshell-update-history/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/openbsd.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openssh.com/txt/release-9.6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/18/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://www.openwall.com/lists/oss-security/2023/12/20/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\"]},{\"url\":\"https://www.paramiko.org/changelog.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.terrapin-attack.com\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Press/Media Coverage\"]},{\"url\":\"https://www.vandyke.com/products/securecrt/history.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-082556.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-364175.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-769027.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-794697.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-915275.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit\"}, {\"url\": \"https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability\"}, {\"url\": \"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://matt.ucc.asn.au/dropbear/CHANGES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.netsarang.com/en/xshell-update-history/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.paramiko.org/changelog.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openssh.com/openbsd.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/openssh/openssh-portable/commits/master\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.bitvise.com/ssh-server-version-history\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/ronf/asyncssh/tags\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://gitlab.com/libssh/libssh-mirror/-/tags\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openssh.com/txt/release-9.6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.terrapin-attack.com\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/warp-tech/russh/releases/tag/v0.40.2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/18/2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://twitter.com/TrueSkrillor/status/1736774389725565005\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/paramiko/paramiko/issues/2337\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38684904\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38685286\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/18/3\", \"name\": \"[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://github.com/mwiede/jsch/issues/457\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/advisories/GHSA-45x7-px36-x8w8\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/libssh2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/CVE-2023-48795\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=1217950\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugs.gentoo.org/920280\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://ubuntu.com/security/CVE-2023-48795\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://access.redhat.com/security/cve/cve-2023-48795\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mwiede/jsch/pull/461\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/libssh2/libssh2/pull/1291\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/rapier1/hpn-ssh/releases\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/issues/456\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://oryx-embedded.com/download/#changelog\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://crates.io/crates/thrussh/versions\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/NixOS/nixpkgs/pull/275249\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/19/5\", \"name\": \"[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/20/3\", \"name\": \"[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/apache/mina-sshd/issues/445\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/hierynomus/sshj/issues/916\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/janmojzis/tinyssh/issues/81\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/20/3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\", \"name\": \"FEDORA-2023-0733306be9\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5586\", \"name\": \"DSA-5586\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://filezilla-project.org/versions.php\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://nova.app/releases/#v11.8\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://roumenpetrov.info/secsh/#news20231220\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.vandyke.com/products/securecrt/history.txt\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://help.panic.com/releasenotes/transmit5/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://winscp.net/eng/docs/history#6.2.2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.bitvise.com/ssh-client-version-history#933\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/cyd01/KiTTY/issues/520\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5588\", \"name\": \"DSA-5588\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://github.com/ssh-mitm/ssh-mitm/issues/165\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://news.ycombinator.com/item?id=38732005\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\", \"name\": \"[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-16\", \"name\": \"GLSA-202312-16\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-17\", \"name\": \"GLSA-202312-17\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\", \"name\": \"FEDORA-2023-20feb865d8\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\", \"name\": \"FEDORA-2023-cb8c606fbb\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\", \"name\": \"FEDORA-2023-e77300e4b5\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\", \"name\": \"FEDORA-2023-b87ec6cf47\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\", \"name\": \"FEDORA-2023-153404713b\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240105-0004/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\", \"name\": \"FEDORA-2024-3bb23c77f3\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\", \"name\": \"FEDORA-2023-55800423a8\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\", \"name\": \"FEDORA-2024-d946b9ad25\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\", \"name\": \"FEDORA-2024-71c2c6526c\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\", \"name\": \"FEDORA-2024-39a8c72ea9\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\", \"name\": \"FEDORA-2024-ae653fb07b\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\", \"name\": \"FEDORA-2024-2705241461\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\", \"name\": \"FEDORA-2024-fb32950d11\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\", \"name\": \"FEDORA-2024-7b08207cdb\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\", \"name\": \"FEDORA-2024-06ebb70bdd\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\", \"name\": \"FEDORA-2024-a53b24023d\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\", \"name\": \"FEDORA-2024-3fd1bc9276\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214084\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Mar/21\", \"name\": \"20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\", \"name\": \"[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/17/8\", \"name\": \"[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/03/06/3\", \"name\": \"[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-04T22:05:21.417Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM APE1808\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.5\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-794697.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-364175.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-915275.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-769027.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-082556.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-05-12T11:02:25.905Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-48795\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2023-12-22T05:01:05.519910Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-354\", \"description\": \"CWE-354 Improper Validation of Integrity Check Value\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-27T20:45:13.765Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html\"}, {\"url\": \"https://matt.ucc.asn.au/dropbear/CHANGES\"}, {\"url\": \"https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES\"}, {\"url\": \"https://www.netsarang.com/en/xshell-update-history/\"}, {\"url\": \"https://www.paramiko.org/changelog.html\"}, {\"url\": \"https://www.openssh.com/openbsd.html\"}, {\"url\": \"https://github.com/openssh/openssh-portable/commits/master\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ\"}, {\"url\": \"https://www.bitvise.com/ssh-server-version-history\"}, {\"url\": \"https://github.com/ronf/asyncssh/tags\"}, {\"url\": \"https://gitlab.com/libssh/libssh-mirror/-/tags\"}, {\"url\": \"https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/\"}, {\"url\": \"https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42\"}, {\"url\": \"https://www.openssh.com/txt/release-9.6\"}, {\"url\": \"https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/\"}, {\"url\": \"https://www.terrapin-attack.com\"}, {\"url\": \"https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25\"}, {\"url\": \"https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst\"}, {\"url\": \"https://thorntech.com/cve-2023-48795-and-sftp-gateway/\"}, {\"url\": \"https://github.com/warp-tech/russh/releases/tag/v0.40.2\"}, {\"url\": \"https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0\"}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/18/2\"}, {\"url\": \"https://twitter.com/TrueSkrillor/status/1736774389725565005\"}, {\"url\": \"https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d\"}, {\"url\": \"https://github.com/paramiko/paramiko/issues/2337\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg\"}, {\"url\": \"https://news.ycombinator.com/item?id=38684904\"}, {\"url\": \"https://news.ycombinator.com/item?id=38685286\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/18/3\", \"name\": \"[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://github.com/mwiede/jsch/issues/457\"}, {\"url\": \"https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10\u0026id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6\"}, {\"url\": \"https://github.com/erlang/otp/releases/tag/OTP-26.2.1\"}, {\"url\": \"https://github.com/advisories/GHSA-45x7-px36-x8w8\"}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/libssh2\"}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg\"}, {\"url\": \"https://security-tracker.debian.org/tracker/CVE-2023-48795\"}, {\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=1217950\"}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2254210\"}, {\"url\": \"https://bugs.gentoo.org/920280\"}, {\"url\": \"https://ubuntu.com/security/CVE-2023-48795\"}, {\"url\": \"https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/\"}, {\"url\": \"https://access.redhat.com/security/cve/cve-2023-48795\"}, {\"url\": \"https://github.com/mwiede/jsch/pull/461\"}, {\"url\": \"https://github.com/drakkan/sftpgo/releases/tag/v2.5.6\"}, {\"url\": \"https://github.com/libssh2/libssh2/pull/1291\"}, {\"url\": \"https://forum.netgate.com/topic/184941/terrapin-ssh-attack\"}, {\"url\": \"https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5\"}, {\"url\": \"https://github.com/rapier1/hpn-ssh/releases\"}, {\"url\": \"https://github.com/proftpd/proftpd/issues/456\"}, {\"url\": \"https://github.com/TeraTermProject/teraterm/releases/tag/v5.1\"}, {\"url\": \"https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15\"}, {\"url\": \"https://oryx-embedded.com/download/#changelog\"}, {\"url\": \"https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update\"}, {\"url\": \"https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22\"}, {\"url\": \"https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab\"}, {\"url\": \"https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3\"}, {\"url\": \"https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC\"}, {\"url\": \"https://crates.io/crates/thrussh/versions\"}, {\"url\": \"https://github.com/NixOS/nixpkgs/pull/275249\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/19/5\", \"name\": \"[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc\"}, {\"url\": \"https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2023/12/20/3\", \"name\": \"[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html\"}, {\"url\": \"https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES\"}, {\"url\": \"https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES\"}, {\"url\": \"https://github.com/apache/mina-sshd/issues/445\"}, {\"url\": \"https://github.com/hierynomus/sshj/issues/916\"}, {\"url\": \"https://github.com/janmojzis/tinyssh/issues/81\"}, {\"url\": \"https://www.openwall.com/lists/oss-security/2023/12/20/3\"}, {\"url\": \"https://security-tracker.debian.org/tracker/source-package/trilead-ssh2\"}, {\"url\": \"https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/\", \"name\": \"FEDORA-2023-0733306be9\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.debian.org/security/2023/dsa-5586\", \"name\": \"DSA-5586\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508\"}, {\"url\": \"https://www.theregister.com/2023/12/20/terrapin_attack_ssh\"}, {\"url\": \"https://filezilla-project.org/versions.php\"}, {\"url\": \"https://nova.app/releases/#v11.8\"}, {\"url\": \"https://roumenpetrov.info/secsh/#news20231220\"}, {\"url\": \"https://www.vandyke.com/products/securecrt/history.txt\"}, {\"url\": \"https://help.panic.com/releasenotes/transmit5/\"}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta\"}, {\"url\": \"https://github.com/PowerShell/Win32-OpenSSH/issues/2189\"}, {\"url\": \"https://winscp.net/eng/docs/history#6.2.2\"}, {\"url\": \"https://www.bitvise.com/ssh-client-version-history#933\"}, {\"url\": \"https://github.com/cyd01/KiTTY/issues/520\"}, {\"url\": \"https://www.debian.org/security/2023/dsa-5588\", \"name\": \"DSA-5588\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/ssh-mitm/ssh-mitm/issues/165\"}, {\"url\": \"https://news.ycombinator.com/item?id=38732005\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html\", \"name\": \"[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-16\", \"name\": \"GLSA-202312-16\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202312-17\", \"name\": \"GLSA-202312-17\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/\", \"name\": \"FEDORA-2023-20feb865d8\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/\", \"name\": \"FEDORA-2023-cb8c606fbb\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/\", \"name\": \"FEDORA-2023-e77300e4b5\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/\", \"name\": \"FEDORA-2023-b87ec6cf47\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/\", \"name\": \"FEDORA-2023-153404713b\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240105-0004/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/\", \"name\": \"FEDORA-2024-3bb23c77f3\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/\", \"name\": \"FEDORA-2023-55800423a8\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/\", \"name\": \"FEDORA-2024-d946b9ad25\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/\", \"name\": \"FEDORA-2024-71c2c6526c\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/\", \"name\": \"FEDORA-2024-39a8c72ea9\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/\", \"name\": \"FEDORA-2024-ae653fb07b\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/\", \"name\": \"FEDORA-2024-2705241461\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/\", \"name\": \"FEDORA-2024-fb32950d11\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/\", \"name\": \"FEDORA-2024-7b08207cdb\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/\", \"name\": \"FEDORA-2024-06ebb70bdd\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html\", \"name\": \"[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/\", \"name\": \"FEDORA-2024-a53b24023d\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/\", \"name\": \"FEDORA-2024-3fd1bc9276\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214084\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Mar/21\", \"name\": \"20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html\", \"name\": \"[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/17/8\", \"name\": \"[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/03/06/3\", \"name\": \"[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins\", \"tags\": [\"mailing-list\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2024-05-01T18:06:23.972Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-48795\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-12T11:02:25.905Z\", \"dateReserved\": \"2023-11-20T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2023-12-18T00:00:00.000Z\", \"assignerShortName\": \"mitre\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
SUSE-SU-2024:0430-1
Vulnerability from csaf_suse - Published: 2024-02-08 14:03 - Updated: 2024-02-08 14:03Summary
Security update for cosign
Severity
Moderate
Notes
Title of the patch: Security update for cosign
Description of the patch: This update for cosign fixes the following issues:
Updated to 2.2.3 (jsc#SLE-23879):
Bug Fixes:
* Fix race condition on verification with multiple signatures attached to image (#3486)
* fix(clean): Fix clean cmd for private registries (#3446)
* Fixed BYO PKI verification (#3427)
Features:
* Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
* Add support for OpenVEX predicate type (#3405)
Documentation:
* Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
* add examples for cosign attach signature cmd (#3468)
Misc:
* Remove CertSubject function (#3467)
* Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)
Updated to 2.2.2 (jsc#SLE-23879):
v2.2.2 adds a new container with a shell,
gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
For private deployments, we have also added an alias for
--insecure-skip-log, --private-infrastructure.
Bug Fixes:
* chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
* Don't require CT log keys if using a key/sk (#3415)
* Fix copy without any flag set (#3409)
* Update cosign generate cmd to not include newline (#3393)
* Fix idempotency error with signing (#3371)
Features:
* Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
* Use the timeout flag value in verify* commands. (#3391)
* add --private-infrastructure flag (#3369)
Container Updates:
* Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
Documentation:
* Update SBOM_SPEC.md (#3358)
- CVE-2023-48795: Fixed the Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).
Patchnames: SUSE-2024-430,SUSE-SLE-Module-Basesystem-15-SP5-2024-430,openSUSE-SLE-15.5-2024-430
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for cosign",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for cosign fixes the following issues:\n\nUpdated to 2.2.3 (jsc#SLE-23879):\n\nBug Fixes:\n\n* Fix race condition on verification with multiple signatures attached to image (#3486)\n* fix(clean): Fix clean cmd for private registries (#3446)\n* Fixed BYO PKI verification (#3427)\n\nFeatures:\n\n* Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)\n* Add support for OpenVEX predicate type (#3405)\n\nDocumentation:\n\n* Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)\n* add examples for cosign attach signature cmd (#3468)\n\nMisc:\n\n* Remove CertSubject function (#3467)\n* Use local rekor and fulcio instances in e2e tests (#3478)\n\n- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)\n\nUpdated to 2.2.2 (jsc#SLE-23879):\n\nv2.2.2 adds a new container with a shell,\ngcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing\ncontainer gcr.io/projectsigstore/cosign:vx.y.z without a shell.\n\nFor private deployments, we have also added an alias for\n--insecure-skip-log, --private-infrastructure.\n\nBug Fixes:\n\n* chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS\n* Don\u0027t require CT log keys if using a key/sk (#3415)\n* Fix copy without any flag set (#3409)\n* Update cosign generate cmd to not include newline (#3393)\n* Fix idempotency error with signing (#3371)\n\nFeatures:\n\n* Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)\n* Use the timeout flag value in verify* commands. (#3391)\n* add --private-infrastructure flag (#3369)\n\nContainer Updates:\n\n* Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)\n\nDocumentation:\n\n* Update SBOM_SPEC.md (#3358)\n\n- CVE-2023-48795: Fixed the Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-430,SUSE-SLE-Module-Basesystem-15-SP5-2024-430,openSUSE-SLE-15.5-2024-430",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0430-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0430-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240430-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0430-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017891.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218207",
"url": "https://bugzilla.suse.com/1218207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for cosign",
"tracking": {
"current_release_date": "2024-02-08T14:03:31Z",
"generator": {
"date": "2024-02-08T14:03:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0430-1",
"initial_release_date": "2024-02-08T14:03:31Z",
"revision_history": [
{
"date": "2024-02-08T14:03:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.aarch64",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.aarch64",
"product_id": "cosign-2.2.3-150400.3.17.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.i586",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.i586",
"product_id": "cosign-2.2.3-150400.3.17.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.ppc64le",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.ppc64le",
"product_id": "cosign-2.2.3-150400.3.17.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.s390x",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.s390x",
"product_id": "cosign-2.2.3-150400.3.17.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cosign-2.2.3-150400.3.17.1.x86_64",
"product": {
"name": "cosign-2.2.3-150400.3.17.1.x86_64",
"product_id": "cosign-2.2.3-150400.3.17.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-2.2.3-150400.3.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
},
"product_reference": "cosign-2.2.3-150400.3.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:cosign-2.2.3-150400.3.17.1.x86_64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.aarch64",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.ppc64le",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.s390x",
"openSUSE Leap 15.5:cosign-2.2.3-150400.3.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-08T14:03:31Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0460-1
Vulnerability from csaf_suse - Published: 2024-02-13 14:29 - Updated: 2024-02-13 14:29Summary
Security update for rekor
Severity
Important
Notes
Title of the patch: Security update for rekor
Description of the patch: This update for rekor fixes the following issues:
update to 1.3.5 (jsc#SLE-23476):
- Additional unique index correction
- Remove timestamp from checkpoint
- Drop conditional when verifying entry checkpoint
- Fix panic for DSSE canonicalization
- Change Redis value for locking mechanism
- give log timestamps nanosecond precision
- output trace in slog and override correlation header name
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)
Updated to 1.3.4:
* add mysql indexstorage backend
* add s3 storage for attestations
* fix: Do not check for pubsub.topics.get on initialization
* fix optional field in cose schema
* Update ranges.go
* update indexstorage interface to reduce roundtrips
* use a single validator library in rekor-cli
* Remove go-playground/validator dependency from pkg/pki
Updated to rekor 1.3.3 (jsc#SLE-23476):
- Update signer flag description
- update trillian to 1.5.3
- adds redis_auth
- Add method to get artifact hash for an entry
- make e2e tests more usable with docker-compose
- install go at correct version for codeql
Updated to rekor 1.3.2 (jsc#SLE-23476):
Updated to rekor 1.3.1 (jsc#SLE-23476):
New Features:
- enable GCP cloud profiling on rekor-server (#1746)
- move index storage into interface (#1741)
- add info to readme to denote additional documentation sources (#1722)
- Add type of ed25519 key for TUF (#1677)
- Allow parsing base64-encoded TUF metadata and root content (#1671)
Quality Enhancements:
- disable quota in trillian in test harness (#1680)
Bug Fixes:
- Update contact for code of conduct (#1720)
- Fix panic when parsing SSH SK pubkeys (#1712)
- Correct index creation (#1708)
- docs: fixzes a small typo on the readme (#1686)
- chore: fix backfill-redis Makefile target (#1685)
Updated to rekor 1.3.0 (jsc#SLE-23476):
- Update openapi.yaml (#1655)
- pass transient errors through retrieveLogEntry (#1653)
- return full entryID on HTTP 409 responses (#1650)
- feat: Support publishing new log entries to Pub/Sub topics (#1580)
- Change values of Identity.Raw, add fingerprints (#1628)
- Extract all subjects from SANs for x509 verifier (#1632)
- Fix type comment for Identity struct (#1619)
- Refactor Identities API (#1611)
- Refactor Verifiers to return multiple keys (#1601)
- Update checkpoint link (#1597)
- Use correct log index in inclusion proof (#1599)
- remove instrumentation library (#1595)
Updated to rekor 1.2.2 (jsc#SLE-23476):
- pass down error with message instead of nil
- swap killswitch for 'docker-compose restart'
- CVE-2023-48795: Fixed Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).
Patchnames: SUSE-2024-460,SUSE-SLE-Module-Basesystem-15-SP5-2024-460,openSUSE-SLE-15.5-2024-460
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rekor",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rekor fixes the following issues:\n\nupdate to 1.3.5 (jsc#SLE-23476):\n\n - Additional unique index correction\n - Remove timestamp from checkpoint\n - Drop conditional when verifying entry checkpoint\n - Fix panic for DSSE canonicalization\n - Change Redis value for locking mechanism\n - give log timestamps nanosecond precision\n - output trace in slog and override correlation header name\n\n- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)\n\nUpdated to 1.3.4:\n\n * add mysql indexstorage backend\n * add s3 storage for attestations\n * fix: Do not check for pubsub.topics.get on initialization\n * fix optional field in cose schema\n * Update ranges.go\n * update indexstorage interface to reduce roundtrips\n * use a single validator library in rekor-cli\n * Remove go-playground/validator dependency from pkg/pki\n\nUpdated to rekor 1.3.3 (jsc#SLE-23476):\n\n - Update signer flag description\n - update trillian to 1.5.3\n - adds redis_auth\n - Add method to get artifact hash for an entry\n - make e2e tests more usable with docker-compose\n - install go at correct version for codeql\n\nUpdated to rekor 1.3.2 (jsc#SLE-23476):\n\n\nUpdated to rekor 1.3.1 (jsc#SLE-23476):\n\nNew Features:\n\n - enable GCP cloud profiling on rekor-server (#1746)\n - move index storage into interface (#1741)\n - add info to readme to denote additional documentation sources (#1722)\n - Add type of ed25519 key for TUF (#1677)\n - Allow parsing base64-encoded TUF metadata and root content (#1671)\n\n Quality Enhancements:\n\n - disable quota in trillian in test harness (#1680)\n\n Bug Fixes:\n\n - Update contact for code of conduct (#1720)\n - Fix panic when parsing SSH SK pubkeys (#1712)\n - Correct index creation (#1708)\n - docs: fixzes a small typo on the readme (#1686)\n - chore: fix backfill-redis Makefile target (#1685)\n\nUpdated to rekor 1.3.0 (jsc#SLE-23476):\n\n - Update openapi.yaml (#1655)\n - pass transient errors through retrieveLogEntry (#1653)\n - return full entryID on HTTP 409 responses (#1650)\n - feat: Support publishing new log entries to Pub/Sub topics (#1580)\n - Change values of Identity.Raw, add fingerprints (#1628)\n - Extract all subjects from SANs for x509 verifier (#1632)\n - Fix type comment for Identity struct (#1619)\n - Refactor Identities API (#1611)\n - Refactor Verifiers to return multiple keys (#1601)\n - Update checkpoint link (#1597)\n - Use correct log index in inclusion proof (#1599)\n - remove instrumentation library (#1595)\n\nUpdated to rekor 1.2.2 (jsc#SLE-23476):\n\n - pass down error with message instead of nil\n - swap killswitch for \u0027docker-compose restart\u0027\n\n- CVE-2023-48795: Fixed Terrapin attack in embedded golang.org/x/crypto/ssh (bsc#1218207).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-460,SUSE-SLE-Module-Basesystem-15-SP5-2024-460,openSUSE-SLE-15.5-2024-460",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0460-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0460-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240460-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0460-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017909.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218207",
"url": "https://bugzilla.suse.com/1218207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for rekor",
"tracking": {
"current_release_date": "2024-02-13T14:29:55Z",
"generator": {
"date": "2024-02-13T14:29:55Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0460-1",
"initial_release_date": "2024-02-13T14:29:55Z",
"revision_history": [
{
"date": "2024-02-13T14:29:55Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.aarch64",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.aarch64",
"product_id": "rekor-1.3.5-150400.4.19.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.i586",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.i586",
"product_id": "rekor-1.3.5-150400.4.19.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.ppc64le",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.ppc64le",
"product_id": "rekor-1.3.5-150400.4.19.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.s390x",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.s390x",
"product_id": "rekor-1.3.5-150400.4.19.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rekor-1.3.5-150400.4.19.1.x86_64",
"product": {
"name": "rekor-1.3.5-150400.4.19.1.x86_64",
"product_id": "rekor-1.3.5-150400.4.19.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-1.3.5-150400.4.19.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
},
"product_reference": "rekor-1.3.5-150400.4.19.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:rekor-1.3.5-150400.4.19.1.x86_64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.aarch64",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.ppc64le",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.s390x",
"openSUSE Leap 15.5:rekor-1.3.5-150400.4.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-13T14:29:55Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0525-1
Vulnerability from csaf_suse - Published: 2024-02-19 07:04 - Updated: 2024-02-19 07:04Summary
Security update for libssh
Severity
Important
Notes
Title of the patch: Security update for libssh
Description of the patch: This update for libssh fixes the following issues:
Update to version 0.9.8 (jsc#PED-7719):
* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
* Allow @ in usernames when parsing from URI composes
Update to version 0.9.7:
* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
guessing (bsc#1211188)
* Fix CVE-2023-2283: a possible authorization bypass in
pki_verify_data_signature under low-memory conditions (bsc#1211190)
* Fix several memory leaks in GSSAPI handling code
Update to version 0.9.6 (bsc#1189608, CVE-2021-3634):
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6
Update to 0.9.5 (bsc#1174713, CVE-2020-16135):
* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
* Improve handling of library initialization (T222)
* Fix parsing of subsecond times in SFTP (T219)
* Make the documentation reproducible
* Remove deprecated API usage in OpenSSL
* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
* Define version in one place (T226)
* Prevent invalid free when using different C runtimes than OpenSSL (T229)
* Compatibility improvements to testsuite
Update to version 0.9.4
* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
* Fix possible Denial of Service attack when using AES-CTR-ciphers
CVE-2020-1730 (bsc#1168699)
Update to version 0.9.3
* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
* SSH-01-006 General: Various unchecked Null-derefs cause DOS
* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
* SSH-01-010 SSH: Deprecated hash function in fingerprinting
* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
* SSH-01-001 State Machine: Initial machine states should be set explicitly
* SSH-01-002 Kex: Differently bound macros used to iterate same array
* SSH-01-005 Code-Quality: Integer sign confusion during assignments
* SSH-01-008 SCP: Protocol Injection via unescaped File Names
* SSH-01-009 SSH: Update documentation which RFCs are implemented
* SSH-01-012 PKI: Information leak via uninitialized stack buffer
Update to version 0.9.2
* Fixed libssh-config.cmake
* Fixed issues with rsa algorithm negotiation (T191)
* Fixed detection of OpenSSL ed25519 support (T197)
Update to version 0.9.1
* Added support for Ed25519 via OpenSSL
* Added support for X25519 via OpenSSL
* Added support for localuser in Match keyword
* Fixed Match keyword to be case sensitive
* Fixed compilation with LibreSSL
* Fixed error report of channel open (T75)
* Fixed sftp documentation (T137)
* Fixed known_hosts parsing (T156)
* Fixed build issue with MinGW (T157)
* Fixed build with gcc 9 (T164)
* Fixed deprecation issues (T165)
* Fixed known_hosts directory creation (T166)
- Split out configuration to separate package to not mess up the
library packaging and coinstallation
Update to verion 0.9.0
* Added support for AES-GCM
* Added improved rekeying support
* Added performance improvements
* Disabled blowfish support by default
* Fixed several ssh config parsing issues
* Added support for DH Group Exchange KEX
* Added support for Encrypt-then-MAC mode
* Added support for parsing server side configuration file
* Added support for ECDSA/Ed25519 certificates
* Added FIPS 140-2 compatibility
* Improved known_hosts parsing
* Improved documentation
* Improved OpenSSL API usage for KEX, DH, and signatures
- Add libssh client and server config files
Patchnames: SUSE-2024-525,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-525,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-525,SUSE-SUSE-MicroOS-5.1-2024-525,SUSE-SUSE-MicroOS-5.2-2024-525,SUSE-Storage-7.1-2024-525
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.8 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
73 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
43 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh fixes the following issues:\n\nUpdate to version 0.9.8 (jsc#PED-7719):\n\n* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)\n* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)\n* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)\n* Allow @ in usernames when parsing from URI composes\n\nUpdate to version 0.9.7:\n\n* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm\n guessing (bsc#1211188)\n* Fix CVE-2023-2283: a possible authorization bypass in\n pki_verify_data_signature under low-memory conditions (bsc#1211190)\n* Fix several memory leaks in GSSAPI handling code\n\nUpdate to version 0.9.6 (bsc#1189608, CVE-2021-3634):\n\n* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6\n\n\nUpdate to 0.9.5 (bsc#1174713, CVE-2020-16135):\n\n* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)\n* Improve handling of library initialization (T222)\n* Fix parsing of subsecond times in SFTP (T219)\n* Make the documentation reproducible\n* Remove deprecated API usage in OpenSSL\n* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN\n* Define version in one place (T226)\n* Prevent invalid free when using different C runtimes than OpenSSL (T229)\n* Compatibility improvements to testsuite \n\nUpdate to version 0.9.4\n\n* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/\n* Fix possible Denial of Service attack when using AES-CTR-ciphers\n CVE-2020-1730 (bsc#1168699)\n\nUpdate to version 0.9.3\n\n* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)\n* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state\n* SSH-01-006 General: Various unchecked Null-derefs cause DOS\n* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys\n* SSH-01-010 SSH: Deprecated hash function in fingerprinting\n* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS\n* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access\n* SSH-01-001 State Machine: Initial machine states should be set explicitly\n* SSH-01-002 Kex: Differently bound macros used to iterate same array\n* SSH-01-005 Code-Quality: Integer sign confusion during assignments\n* SSH-01-008 SCP: Protocol Injection via unescaped File Names\n* SSH-01-009 SSH: Update documentation which RFCs are implemented\n* SSH-01-012 PKI: Information leak via uninitialized stack buffer\n\nUpdate to version 0.9.2\n\n* Fixed libssh-config.cmake\n* Fixed issues with rsa algorithm negotiation (T191)\n* Fixed detection of OpenSSL ed25519 support (T197)\n\nUpdate to version 0.9.1\n\n* Added support for Ed25519 via OpenSSL\n* Added support for X25519 via OpenSSL\n* Added support for localuser in Match keyword\n* Fixed Match keyword to be case sensitive\n* Fixed compilation with LibreSSL\n* Fixed error report of channel open (T75)\n* Fixed sftp documentation (T137)\n* Fixed known_hosts parsing (T156)\n* Fixed build issue with MinGW (T157)\n* Fixed build with gcc 9 (T164)\n* Fixed deprecation issues (T165)\n* Fixed known_hosts directory creation (T166)\n\n- Split out configuration to separate package to not mess up the\n library packaging and coinstallation\n\nUpdate to verion 0.9.0\n\n* Added support for AES-GCM\n* Added improved rekeying support\n* Added performance improvements\n* Disabled blowfish support by default\n* Fixed several ssh config parsing issues\n* Added support for DH Group Exchange KEX\n* Added support for Encrypt-then-MAC mode\n* Added support for parsing server side configuration file\n* Added support for ECDSA/Ed25519 certificates\n* Added FIPS 140-2 compatibility\n* Improved known_hosts parsing\n* Improved documentation\n* Improved OpenSSL API usage for KEX, DH, and signatures\n\n- Add libssh client and server config files\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-525,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-525,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-525,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-525,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-525,SUSE-SUSE-MicroOS-5.1-2024-525,SUSE-SUSE-MicroOS-5.2-2024-525,SUSE-Storage-7.1-2024-525",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0525-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0525-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240525-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0525-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017947.html"
},
{
"category": "self",
"summary": "SUSE Bug 1158095",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "self",
"summary": "SUSE Bug 1168699",
"url": "https://bugzilla.suse.com/1168699"
},
{
"category": "self",
"summary": "SUSE Bug 1174713",
"url": "https://bugzilla.suse.com/1174713"
},
{
"category": "self",
"summary": "SUSE Bug 1189608",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "self",
"summary": "SUSE Bug 1211188",
"url": "https://bugzilla.suse.com/1211188"
},
{
"category": "self",
"summary": "SUSE Bug 1211190",
"url": "https://bugzilla.suse.com/1211190"
},
{
"category": "self",
"summary": "SUSE Bug 1218126",
"url": "https://bugzilla.suse.com/1218126"
},
{
"category": "self",
"summary": "SUSE Bug 1218186",
"url": "https://bugzilla.suse.com/1218186"
},
{
"category": "self",
"summary": "SUSE Bug 1218209",
"url": "https://bugzilla.suse.com/1218209"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14889 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16135 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-1730 page",
"url": "https://www.suse.com/security/cve/CVE-2020-1730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3634 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1667 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6004 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6918 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6918/"
}
],
"title": "Security update for libssh",
"tracking": {
"current_release_date": "2024-02-19T07:04:14Z",
"generator": {
"date": "2024-02-19T07:04:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0525-1",
"initial_release_date": "2024-02-19T07:04:14Z",
"revision_history": [
{
"date": "2024-02-19T07:04:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"product_id": "libssh-config-0.9.8-150200.13.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.aarch64",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64",
"product_id": "libssh4-0.9.8-150200.13.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh4-64bit-0.9.8-150200.13.3.1.aarch64_ilp32",
"product": {
"name": "libssh4-64bit-0.9.8-150200.13.3.1.aarch64_ilp32",
"product_id": "libssh4-64bit-0.9.8-150200.13.3.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.i586",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.i586",
"product_id": "libssh-config-0.9.8-150200.13.3.1.i586"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.i586",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.i586",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.i586"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.i586",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.i586",
"product_id": "libssh4-0.9.8-150200.13.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"product_id": "libssh-config-0.9.8-150200.13.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"product_id": "libssh4-0.9.8-150200.13.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.s390x",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x",
"product_id": "libssh-config-0.9.8-150200.13.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.s390x",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x",
"product_id": "libssh4-0.9.8-150200.13.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh-config-0.9.8-150200.13.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh-devel-0.9.8-150200.13.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh4-0.9.8-150200.13.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"product": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"product_id": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.1",
"product": {
"name": "SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.2",
"product": {
"name": "SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.2"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-config-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh-devel-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-14889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14889"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14889",
"url": "https://www.suse.com/security/cve/CVE-2019-14889"
},
{
"category": "external",
"summary": "SUSE Bug 1158095 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "external",
"summary": "SUSE Bug 1224871 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1224871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "important"
}
],
"title": "CVE-2019-14889"
},
{
"cve": "CVE-2020-16135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16135"
}
],
"notes": [
{
"category": "general",
"text": "libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16135",
"url": "https://www.suse.com/security/cve/CVE-2020-16135"
},
{
"category": "external",
"summary": "SUSE Bug 1174713 for CVE-2020-16135",
"url": "https://bugzilla.suse.com/1174713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2020-16135"
},
{
"cve": "CVE-2020-1730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-1730"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn\u0027t been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-1730",
"url": "https://www.suse.com/security/cve/CVE-2020-1730"
},
{
"category": "external",
"summary": "SUSE Bug 1168699 for CVE-2020-1730",
"url": "https://bugzilla.suse.com/1168699"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2020-1730"
},
{
"cve": "CVE-2021-3634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3634"
}
],
"notes": [
{
"category": "general",
"text": "A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating \"secret_hash\" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3634",
"url": "https://www.suse.com/security/cve/CVE-2021-3634"
},
{
"category": "external",
"summary": "SUSE Bug 1189608 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1194948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "low"
}
],
"title": "CVE-2021-3634"
},
{
"cve": "CVE-2023-1667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1667"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1667",
"url": "https://www.suse.com/security/cve/CVE-2023-1667"
},
{
"category": "external",
"summary": "SUSE Bug 1211188 for CVE-2023-1667",
"url": "https://bugzilla.suse.com/1211188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-1667"
},
{
"cve": "CVE-2023-2283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2283"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2283",
"url": "https://www.suse.com/security/cve/CVE-2023-2283"
},
{
"category": "external",
"summary": "SUSE Bug 1211190 for CVE-2023-2283",
"url": "https://bugzilla.suse.com/1211190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-2283"
},
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
},
{
"cve": "CVE-2023-6004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6004"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6004",
"url": "https://www.suse.com/security/cve/CVE-2023-6004"
},
{
"category": "external",
"summary": "SUSE Bug 1218209 for CVE-2023-6004",
"url": "https://bugzilla.suse.com/1218209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-6004"
},
{
"cve": "CVE-2023-6918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6918"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6918",
"url": "https://www.suse.com/security/cve/CVE-2023-6918"
},
{
"category": "external",
"summary": "SUSE Bug 1218186 for CVE-2023-6918",
"url": "https://bugzilla.suse.com/1218186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh4-32bit-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-19T07:04:14Z",
"details": "moderate"
}
],
"title": "CVE-2023-6918"
}
]
}
SUSE-SU-2024:0539-1
Vulnerability from csaf_suse - Published: 2024-02-20 15:03 - Updated: 2024-02-20 15:03Summary
Security update for libssh
Severity
Important
Notes
Title of the patch: Security update for libssh
Description of the patch: This update for libssh fixes the following issues:
Update to version 0.9.8 (jsc#PED-7719):
* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
* Allow @ in usernames when parsing from URI composes
Update to version 0.9.7
* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
guessing (bsc#1211188)
* Fix CVE-2023-2283: a possible authorization bypass in
pki_verify_data_signature under low-memory conditions (bsc#1211190)
* Fix several memory leaks in GSSAPI handling code
Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6
Update to version 0.9.5 (bsc#1174713, CVE-2020-16135):
* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
* Improve handling of library initialization (T222)
* Fix parsing of subsecond times in SFTP (T219)
* Make the documentation reproducible
* Remove deprecated API usage in OpenSSL
* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
* Define version in one place (T226)
* Prevent invalid free when using different C runtimes than OpenSSL (T229)
* Compatibility improvements to testsuite
Update to version 0.9.4:
* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
* Fix possible Denial of Service attack when using AES-CTR-ciphers
CVE-2020-1730 (bsc#1168699)
Update to version 0.9.3:
* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
* SSH-01-006 General: Various unchecked Null-derefs cause DOS
* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
* SSH-01-010 SSH: Deprecated hash function in fingerprinting
* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
* SSH-01-001 State Machine: Initial machine states should be set explicitly
* SSH-01-002 Kex: Differently bound macros used to iterate same array
* SSH-01-005 Code-Quality: Integer sign confusion during assignments
* SSH-01-008 SCP: Protocol Injection via unescaped File Names
* SSH-01-009 SSH: Update documentation which RFCs are implemented
* SSH-01-012 PKI: Information leak via uninitialized stack buffer
Update to version 0.9.2:
* Fixed libssh-config.cmake
* Fixed issues with rsa algorithm negotiation (T191)
* Fixed detection of OpenSSL ed25519 support (T197)
Update to version 0.9.1:
* Added support for Ed25519 via OpenSSL
* Added support for X25519 via OpenSSL
* Added support for localuser in Match keyword
* Fixed Match keyword to be case sensitive
* Fixed compilation with LibreSSL
* Fixed error report of channel open (T75)
* Fixed sftp documentation (T137)
* Fixed known_hosts parsing (T156)
* Fixed build issue with MinGW (T157)
* Fixed build with gcc 9 (T164)
* Fixed deprecation issues (T165)
* Fixed known_hosts directory creation (T166)
Update to verion 0.9.0:
* Added support for AES-GCM
* Added improved rekeying support
* Added performance improvements
* Disabled blowfish support by default
* Fixed several ssh config parsing issues
* Added support for DH Group Exchange KEX
* Added support for Encrypt-then-MAC mode
* Added support for parsing server side configuration file
* Added support for ECDSA/Ed25519 certificates
* Added FIPS 140-2 compatibility
* Improved known_hosts parsing
* Improved documentation
* Improved OpenSSL API usage for KEX, DH, and signatures
- Add libssh client and server config files
Patchnames: SUSE-2024-539,SUSE-SLE-SDK-12-SP5-2024-539,SUSE-SLE-SERVER-12-SP5-2024-539
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.1 (High)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
4.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.8 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
43 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh fixes the following issues:\n\nUpdate to version 0.9.8 (jsc#PED-7719):\n\n* Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)\n* Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)\n* Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)\n* Allow @ in usernames when parsing from URI composes\n\nUpdate to version 0.9.7\n\n* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm\n guessing (bsc#1211188)\n* Fix CVE-2023-2283: a possible authorization bypass in\n pki_verify_data_signature under low-memory conditions (bsc#1211190)\n* Fix several memory leaks in GSSAPI handling code\n\nUpdate to version 0.9.6 (bsc#1189608, CVE-2021-3634)\n\n* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6\n\nUpdate to version 0.9.5 (bsc#1174713, CVE-2020-16135):\n\n* CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)\n* Improve handling of library initialization (T222)\n* Fix parsing of subsecond times in SFTP (T219)\n* Make the documentation reproducible\n* Remove deprecated API usage in OpenSSL\n* Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN\n* Define version in one place (T226)\n* Prevent invalid free when using different C runtimes than OpenSSL (T229)\n* Compatibility improvements to testsuite \n\nUpdate to version 0.9.4:\n\n* https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/\n* Fix possible Denial of Service attack when using AES-CTR-ciphers\n CVE-2020-1730 (bsc#1168699)\n\nUpdate to version 0.9.3:\n\n* Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)\n* SSH-01-003 Client: Missing NULL check leads to crash in erroneous state\n* SSH-01-006 General: Various unchecked Null-derefs cause DOS\n* SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys\n* SSH-01-010 SSH: Deprecated hash function in fingerprinting\n* SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS\n* SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access\n* SSH-01-001 State Machine: Initial machine states should be set explicitly\n* SSH-01-002 Kex: Differently bound macros used to iterate same array\n* SSH-01-005 Code-Quality: Integer sign confusion during assignments\n* SSH-01-008 SCP: Protocol Injection via unescaped File Names\n* SSH-01-009 SSH: Update documentation which RFCs are implemented\n* SSH-01-012 PKI: Information leak via uninitialized stack buffer\n\nUpdate to version 0.9.2:\n\n* Fixed libssh-config.cmake\n* Fixed issues with rsa algorithm negotiation (T191)\n* Fixed detection of OpenSSL ed25519 support (T197)\n\nUpdate to version 0.9.1:\n\n* Added support for Ed25519 via OpenSSL\n* Added support for X25519 via OpenSSL\n* Added support for localuser in Match keyword\n* Fixed Match keyword to be case sensitive\n* Fixed compilation with LibreSSL\n* Fixed error report of channel open (T75)\n* Fixed sftp documentation (T137)\n* Fixed known_hosts parsing (T156)\n* Fixed build issue with MinGW (T157)\n* Fixed build with gcc 9 (T164)\n* Fixed deprecation issues (T165)\n* Fixed known_hosts directory creation (T166)\n\nUpdate to verion 0.9.0:\n\n* Added support for AES-GCM\n* Added improved rekeying support\n* Added performance improvements\n* Disabled blowfish support by default\n* Fixed several ssh config parsing issues\n* Added support for DH Group Exchange KEX\n* Added support for Encrypt-then-MAC mode\n* Added support for parsing server side configuration file\n* Added support for ECDSA/Ed25519 certificates\n* Added FIPS 140-2 compatibility\n* Improved known_hosts parsing\n* Improved documentation\n* Improved OpenSSL API usage for KEX, DH, and signatures\n\n- Add libssh client and server config files\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-539,SUSE-SLE-SDK-12-SP5-2024-539,SUSE-SLE-SERVER-12-SP5-2024-539",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0539-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0539-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240539-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0539-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017974.html"
},
{
"category": "self",
"summary": "SUSE Bug 1158095",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "self",
"summary": "SUSE Bug 1168699",
"url": "https://bugzilla.suse.com/1168699"
},
{
"category": "self",
"summary": "SUSE Bug 1174713",
"url": "https://bugzilla.suse.com/1174713"
},
{
"category": "self",
"summary": "SUSE Bug 1189608",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "self",
"summary": "SUSE Bug 1211188",
"url": "https://bugzilla.suse.com/1211188"
},
{
"category": "self",
"summary": "SUSE Bug 1211190",
"url": "https://bugzilla.suse.com/1211190"
},
{
"category": "self",
"summary": "SUSE Bug 1218126",
"url": "https://bugzilla.suse.com/1218126"
},
{
"category": "self",
"summary": "SUSE Bug 1218186",
"url": "https://bugzilla.suse.com/1218186"
},
{
"category": "self",
"summary": "SUSE Bug 1218209",
"url": "https://bugzilla.suse.com/1218209"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14889 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-16135 page",
"url": "https://www.suse.com/security/cve/CVE-2020-16135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-1730 page",
"url": "https://www.suse.com/security/cve/CVE-2020-1730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3634 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-1667 page",
"url": "https://www.suse.com/security/cve/CVE-2023-1667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6004 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-6918 page",
"url": "https://www.suse.com/security/cve/CVE-2023-6918/"
}
],
"title": "Security update for libssh",
"tracking": {
"current_release_date": "2024-02-20T15:03:55Z",
"generator": {
"date": "2024-02-20T15:03:55Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0539-1",
"initial_release_date": "2024-02-20T15:03:55Z",
"revision_history": [
{
"date": "2024-02-20T15:03:55Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.aarch64",
"product": {
"name": "libssh-config-0.9.8-3.12.2.aarch64",
"product_id": "libssh-config-0.9.8-3.12.2.aarch64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.aarch64",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.aarch64",
"product_id": "libssh-devel-0.9.8-3.12.2.aarch64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.aarch64",
"product": {
"name": "libssh4-0.9.8-3.12.2.aarch64",
"product_id": "libssh4-0.9.8-3.12.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh4-64bit-0.9.8-3.12.2.aarch64_ilp32",
"product": {
"name": "libssh4-64bit-0.9.8-3.12.2.aarch64_ilp32",
"product_id": "libssh4-64bit-0.9.8-3.12.2.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.i586",
"product": {
"name": "libssh-config-0.9.8-3.12.2.i586",
"product_id": "libssh-config-0.9.8-3.12.2.i586"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.i586",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.i586",
"product_id": "libssh-devel-0.9.8-3.12.2.i586"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.i586",
"product": {
"name": "libssh4-0.9.8-3.12.2.i586",
"product_id": "libssh4-0.9.8-3.12.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.ppc64le",
"product": {
"name": "libssh-config-0.9.8-3.12.2.ppc64le",
"product_id": "libssh-config-0.9.8-3.12.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.ppc64le",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.ppc64le",
"product_id": "libssh-devel-0.9.8-3.12.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.ppc64le",
"product": {
"name": "libssh4-0.9.8-3.12.2.ppc64le",
"product_id": "libssh4-0.9.8-3.12.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.s390",
"product": {
"name": "libssh-config-0.9.8-3.12.2.s390",
"product_id": "libssh-config-0.9.8-3.12.2.s390"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.s390",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.s390",
"product_id": "libssh-devel-0.9.8-3.12.2.s390"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.s390",
"product": {
"name": "libssh4-0.9.8-3.12.2.s390",
"product_id": "libssh4-0.9.8-3.12.2.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh-config-0.9.8-3.12.2.s390x",
"product_id": "libssh-config-0.9.8-3.12.2.s390x"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.s390x",
"product_id": "libssh-devel-0.9.8-3.12.2.s390x"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh4-0.9.8-3.12.2.s390x",
"product_id": "libssh4-0.9.8-3.12.2.s390x"
}
},
{
"category": "product_version",
"name": "libssh4-32bit-0.9.8-3.12.2.s390x",
"product": {
"name": "libssh4-32bit-0.9.8-3.12.2.s390x",
"product_id": "libssh4-32bit-0.9.8-3.12.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh-config-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh-config-0.9.8-3.12.2.x86_64",
"product_id": "libssh-config-0.9.8-3.12.2.x86_64"
}
},
{
"category": "product_version",
"name": "libssh-devel-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh-devel-0.9.8-3.12.2.x86_64",
"product_id": "libssh-devel-0.9.8-3.12.2.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh4-0.9.8-3.12.2.x86_64",
"product_id": "libssh4-0.9.8-3.12.2.x86_64"
}
},
{
"category": "product_version",
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"product": {
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"product_id": "libssh4-32bit-0.9.8-3.12.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-devel-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh-devel-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh4-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh4-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh-config-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh-config-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh4-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh4-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh-config-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh-config-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh-config-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh-config-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64"
},
"product_reference": "libssh4-0.9.8-3.12.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le"
},
"product_reference": "libssh4-0.9.8-3.12.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh4-32bit-0.9.8-3.12.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64"
},
"product_reference": "libssh4-32bit-0.9.8-3.12.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-14889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14889"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14889",
"url": "https://www.suse.com/security/cve/CVE-2019-14889"
},
{
"category": "external",
"summary": "SUSE Bug 1158095 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1158095"
},
{
"category": "external",
"summary": "SUSE Bug 1224871 for CVE-2019-14889",
"url": "https://bugzilla.suse.com/1224871"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "important"
}
],
"title": "CVE-2019-14889"
},
{
"cve": "CVE-2020-16135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-16135"
}
],
"notes": [
{
"category": "general",
"text": "libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-16135",
"url": "https://www.suse.com/security/cve/CVE-2020-16135"
},
{
"category": "external",
"summary": "SUSE Bug 1174713 for CVE-2020-16135",
"url": "https://bugzilla.suse.com/1174713"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2020-16135"
},
{
"cve": "CVE-2020-1730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-1730"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn\u0027t been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-1730",
"url": "https://www.suse.com/security/cve/CVE-2020-1730"
},
{
"category": "external",
"summary": "SUSE Bug 1168699 for CVE-2020-1730",
"url": "https://bugzilla.suse.com/1168699"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2020-1730"
},
{
"cve": "CVE-2021-3634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3634"
}
],
"notes": [
{
"category": "general",
"text": "A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating \"secret_hash\" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3634",
"url": "https://www.suse.com/security/cve/CVE-2021-3634"
},
{
"category": "external",
"summary": "SUSE Bug 1189608 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1189608"
},
{
"category": "external",
"summary": "SUSE Bug 1194948 for CVE-2021-3634",
"url": "https://bugzilla.suse.com/1194948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "low"
}
],
"title": "CVE-2021-3634"
},
{
"cve": "CVE-2023-1667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-1667"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-1667",
"url": "https://www.suse.com/security/cve/CVE-2023-1667"
},
{
"category": "external",
"summary": "SUSE Bug 1211188 for CVE-2023-1667",
"url": "https://bugzilla.suse.com/1211188"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-1667"
},
{
"cve": "CVE-2023-2283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2283"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2283",
"url": "https://www.suse.com/security/cve/CVE-2023-2283"
},
{
"category": "external",
"summary": "SUSE Bug 1211190 for CVE-2023-2283",
"url": "https://bugzilla.suse.com/1211190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-2283"
},
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
},
{
"cve": "CVE-2023-6004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6004"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6004",
"url": "https://www.suse.com/security/cve/CVE-2023-6004"
},
{
"category": "external",
"summary": "SUSE Bug 1218209 for CVE-2023-6004",
"url": "https://bugzilla.suse.com/1218209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-6004"
},
{
"cve": "CVE-2023-6918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-6918"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-6918",
"url": "https://www.suse.com/security/cve/CVE-2023-6918"
},
{
"category": "external",
"summary": "SUSE Bug 1218186 for CVE-2023-6918",
"url": "https://bugzilla.suse.com/1218186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh-config-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh4-32bit-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh-devel-0.9.8-3.12.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh4-0.9.8-3.12.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:03:55Z",
"details": "moderate"
}
],
"title": "CVE-2023-6918"
}
]
}
SUSE-SU-2024:0543-1
Vulnerability from csaf_suse - Published: 2024-02-20 15:04 - Updated: 2024-02-20 15:04Summary
Security update for libssh2_org
Severity
Important
Notes
Title of the patch: Security update for libssh2_org
Description of the patch: This update for libssh2_org fixes the following issues:
- Always add the KEX pseudo-methods 'ext-info-c' and 'kex-strict-c-v00@openssh.com'
when configuring custom method list. [bsc#1218971, CVE-2023-48795]
* The strict-kex extension is announced in the list of available
KEX methods. However, when the default KEX method list is modified
or replaced, the extension is not added back automatically.
Patchnames: SUSE-2024-543,SUSE-SLE-SDK-12-SP5-2024-543,SUSE-SLE-SERVER-12-SP5-2024-543
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh2_org",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh2_org fixes the following issues:\n\n- Always add the KEX pseudo-methods \u0027ext-info-c\u0027 and \u0027kex-strict-c-v00@openssh.com\u0027\n when configuring custom method list. [bsc#1218971, CVE-2023-48795]\n\n * The strict-kex extension is announced in the list of available\n KEX methods. However, when the default KEX method list is modified\n or replaced, the extension is not added back automatically.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-543,SUSE-SLE-SDK-12-SP5-2024-543,SUSE-SLE-SERVER-12-SP5-2024-543",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0543-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0543-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240543-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0543-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017959.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218971",
"url": "https://bugzilla.suse.com/1218971"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for libssh2_org",
"tracking": {
"current_release_date": "2024-02-20T15:04:50Z",
"generator": {
"date": "2024-02-20T15:04:50Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0543-1",
"initial_release_date": "2024-02-20T15:04:50Z",
"revision_history": [
{
"date": "2024-02-20T15:04:50Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.aarch64",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.aarch64",
"product_id": "libssh2-1-1.11.0-29.12.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.aarch64",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.aarch64",
"product_id": "libssh2-devel-1.11.0-29.12.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-64bit-1.11.0-29.12.1.aarch64_ilp32",
"product": {
"name": "libssh2-1-64bit-1.11.0-29.12.1.aarch64_ilp32",
"product_id": "libssh2-1-64bit-1.11.0-29.12.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.i586",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.i586",
"product_id": "libssh2-1-1.11.0-29.12.1.i586"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.i586",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.i586",
"product_id": "libssh2-devel-1.11.0-29.12.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.ppc64le",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.ppc64le",
"product_id": "libssh2-1-1.11.0-29.12.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.ppc64le",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.ppc64le",
"product_id": "libssh2-devel-1.11.0-29.12.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.s390",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.s390",
"product_id": "libssh2-1-1.11.0-29.12.1.s390"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.s390",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.s390",
"product_id": "libssh2-devel-1.11.0-29.12.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.s390x",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.s390x",
"product_id": "libssh2-1-1.11.0-29.12.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"product": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"product_id": "libssh2-1-32bit-1.11.0-29.12.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.s390x",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.s390x",
"product_id": "libssh2-devel-1.11.0-29.12.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-29.12.1.x86_64",
"product": {
"name": "libssh2-1-1.11.0-29.12.1.x86_64",
"product_id": "libssh2-1-1.11.0-29.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"product": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"product_id": "libssh2-1-32bit-1.11.0-29.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-29.12.1.x86_64",
"product": {
"name": "libssh2-devel-1.11.0-29.12.1.x86_64",
"product_id": "libssh2-devel-1.11.0-29.12.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-29.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.11.0-29.12.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:libssh2-devel-1.11.0-29.12.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T15:04:50Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0558-1
Vulnerability from csaf_suse - Published: 2024-02-20 16:34 - Updated: 2024-02-20 16:34Summary
Security update for libssh2_org
Severity
Important
Notes
Title of the patch: Security update for libssh2_org
Description of the patch: This update for libssh2_org fixes the following issues:
- Always add the KEX pseudo-methods 'ext-info-c' and 'kex-strict-c-v00@openssh.com'
when configuring custom method list. [bsc#1218971, CVE-2023-48795]
* The strict-kex extension is announced in the list of available
KEX methods. However, when the default KEX method list is modified
or replaced, the extension is not added back automatically.
Patchnames: SUSE-2024-558,SUSE-SLE-Micro-5.3-2024-558,SUSE-SLE-Micro-5.4-2024-558,SUSE-SLE-Micro-5.5-2024-558,SUSE-SLE-Module-Basesystem-15-SP5-2024-558,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-558,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-558,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-558,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-558,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-558,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-558,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-558,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-558,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-558,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-558,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-558,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-558,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-558,SUSE-SUSE-MicroOS-5.1-2024-558,SUSE-SUSE-MicroOS-5.2-2024-558,SUSE-Storage-7.1-2024-558,openSUSE-Leap-Micro-5.3-2024-558,openSUSE-Leap-Micro-5.4-2024-558,openSUSE-SLE-15.5-2024-558
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
104 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libssh2_org",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libssh2_org fixes the following issues:\n\n- Always add the KEX pseudo-methods \u0027ext-info-c\u0027 and \u0027kex-strict-c-v00@openssh.com\u0027\n when configuring custom method list. [bsc#1218971, CVE-2023-48795]\n\n * The strict-kex extension is announced in the list of available\n KEX methods. However, when the default KEX method list is modified\n or replaced, the extension is not added back automatically.\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-558,SUSE-SLE-Micro-5.3-2024-558,SUSE-SLE-Micro-5.4-2024-558,SUSE-SLE-Micro-5.5-2024-558,SUSE-SLE-Module-Basesystem-15-SP5-2024-558,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-558,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-558,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-558,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-558,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-558,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-558,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-558,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-558,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-558,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-558,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-558,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-558,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-558,SUSE-SUSE-MicroOS-5.1-2024-558,SUSE-SUSE-MicroOS-5.2-2024-558,SUSE-Storage-7.1-2024-558,openSUSE-Leap-Micro-5.3-2024-558,openSUSE-Leap-Micro-5.4-2024-558,openSUSE-SLE-15.5-2024-558",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0558-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0558-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240558-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0558-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017960.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218971",
"url": "https://bugzilla.suse.com/1218971"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for libssh2_org",
"tracking": {
"current_release_date": "2024-02-20T16:34:49Z",
"generator": {
"date": "2024-02-20T16:34:49Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0558-1",
"initial_release_date": "2024-02-20T16:34:49Z",
"revision_history": [
{
"date": "2024-02-20T16:34:49Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"product": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"product_id": "libssh2-1-1.11.0-150000.4.25.1.aarch64"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"product": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"product_id": "libssh2-devel-1.11.0-150000.4.25.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-64bit-1.11.0-150000.4.25.1.aarch64_ilp32",
"product": {
"name": "libssh2-1-64bit-1.11.0-150000.4.25.1.aarch64_ilp32",
"product_id": "libssh2-1-64bit-1.11.0-150000.4.25.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-150000.4.25.1.i586",
"product": {
"name": "libssh2-1-1.11.0-150000.4.25.1.i586",
"product_id": "libssh2-1-1.11.0-150000.4.25.1.i586"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-150000.4.25.1.i586",
"product": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.i586",
"product_id": "libssh2-devel-1.11.0-150000.4.25.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"product": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"product_id": "libssh2-1-1.11.0-150000.4.25.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"product": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"product_id": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"product": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"product_id": "libssh2-1-1.11.0-150000.4.25.1.s390x"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"product": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"product_id": "libssh2-devel-1.11.0-150000.4.25.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"product": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"product_id": "libssh2-1-1.11.0-150000.4.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"product": {
"name": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"product_id": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64"
}
},
{
"category": "product_version",
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"product": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"product_id": "libssh2-devel-1.11.0-150000.4.25.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.3",
"product": {
"name": "SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.4",
"product": {
"name": "SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.5",
"product": {
"name": "SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.3",
"product": {
"name": "SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.3",
"product": {
"name": "SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.1",
"product": {
"name": "SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.2",
"product": {
"name": "SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.2"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7.1",
"product": {
"name": "SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7.1"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.3",
"product": {
"name": "openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.4",
"product": {
"name": "openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Manager Proxy 4.3",
"product_id": "SUSE Manager Proxy 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Manager Server 4.3",
"product_id": "SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of SUSE Enterprise Storage 7.1",
"product_id": "SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-1.11.0-150000.4.25.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.aarch64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.s390x"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libssh2-devel-1.11.0-150000.4.25.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.x86_64"
},
"product_reference": "libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Proxy 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Proxy 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Proxy 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Proxy 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Enterprise Storage 7.1:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP5:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP3-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Proxy 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Proxy 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.s390x",
"SUSE Manager Server 4.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"SUSE Manager Server 4.3:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.ppc64le",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap 15.5:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-1-32bit-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.ppc64le",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap 15.5:libssh2-devel-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap Micro 5.3:libssh2-1-1.11.0-150000.4.25.1.x86_64",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.aarch64",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.s390x",
"openSUSE Leap Micro 5.4:libssh2-1-1.11.0-150000.4.25.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-02-20T16:34:49Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0972-1
Vulnerability from csaf_suse - Published: 2024-03-22 10:21 - Updated: 2024-03-22 10:21Summary
Security update for jbcrypt, trilead-ssh2
Severity
Moderate
Notes
Title of the patch: Security update for jbcrypt, trilead-ssh2
Description of the patch: This update for jbcrypt, trilead-ssh2 fixes the following issues:
- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218198).
Patchnames: SUSE-2024-972,openSUSE-SLE-15.5-2024-972
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for jbcrypt, trilead-ssh2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for jbcrypt, trilead-ssh2 fixes the following issues:\n\n- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218198).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-972,openSUSE-SLE-15.5-2024-972",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0972-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0972-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240972-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0972-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018189.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218198",
"url": "https://bugzilla.suse.com/1218198"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for jbcrypt, trilead-ssh2",
"tracking": {
"current_release_date": "2024-03-22T10:21:42Z",
"generator": {
"date": "2024-03-22T10:21:42Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0972-1",
"initial_release_date": "2024-03-22T10:21:42Z",
"revision_history": [
{
"date": "2024-03-22T10:21:42Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "jbcrypt-1.0.2-150200.5.3.1.noarch",
"product": {
"name": "jbcrypt-1.0.2-150200.5.3.1.noarch",
"product_id": "jbcrypt-1.0.2-150200.5.3.1.noarch"
}
},
{
"category": "product_version",
"name": "jbcrypt-javadoc-1.0.2-150200.5.3.1.noarch",
"product": {
"name": "jbcrypt-javadoc-1.0.2-150200.5.3.1.noarch",
"product_id": "jbcrypt-javadoc-1.0.2-150200.5.3.1.noarch"
}
},
{
"category": "product_version",
"name": "trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"product": {
"name": "trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"product_id": "trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"product": {
"name": "trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"product_id": "trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch"
},
"product_reference": "trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch"
},
"product_reference": "trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"openSUSE Leap 15.5:trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"openSUSE Leap 15.5:trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:trilead-ssh2-217.293.v56de4d4d3515-150200.3.7.1.noarch",
"openSUSE Leap 15.5:trilead-ssh2-javadoc-217.293.v56de4d4d3515-150200.3.7.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-22T10:21:42Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:0974-1
Vulnerability from csaf_suse - Published: 2024-03-22 10:23 - Updated: 2024-03-22 10:23Summary
Security update for jsch-agent-proxy
Severity
Moderate
Notes
Title of the patch: Security update for jsch-agent-proxy
Description of the patch: This update for jsch-agent-proxy fixes the following issues:
- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218198).
Patchnames: SUSE-2024-974,openSUSE-SLE-15.5-2024-974
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
References
9 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for jsch-agent-proxy",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for jsch-agent-proxy fixes the following issues:\n\n- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218198).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-974,openSUSE-SLE-15.5-2024-974",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0974-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0974-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240974-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0974-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018187.html"
},
{
"category": "self",
"summary": "SUSE Bug 1218198",
"url": "https://bugzilla.suse.com/1218198"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for jsch-agent-proxy",
"tracking": {
"current_release_date": "2024-03-22T10:23:44Z",
"generator": {
"date": "2024-03-22T10:23:44Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0974-1",
"initial_release_date": "2024-03-22T10:23:44Z",
"revision_history": [
{
"date": "2024-03-22T10:23:44Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch"
}
},
{
"category": "product_version",
"name": "jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch",
"product": {
"name": "jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch",
"product_id": "jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch"
},
"product_reference": "jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:jsch-agent-proxy-connector-factory-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-core-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-javadoc-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-jsch-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-pageant-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-sshagent-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-usocket-jna-0.0.9-150200.3.7.1.noarch",
"openSUSE Leap 15.5:jsch-agent-proxy-usocket-nc-0.0.9-150200.3.7.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-22T10:23:44Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2024:3656-1
Vulnerability from csaf_suse - Published: 2024-10-16 11:33 - Updated: 2024-10-16 11:33Summary
Security update for etcd
Severity
Moderate
Notes
Title of the patch: Security update for etcd
Description of the patch: This update for etcd fixes the following issues:
Update to version 3.5.12:
Security fixes:
- CVE-2018-16873: Fixed remote command execution in cmd/go (bsc#1118897)
- CVE-2018-16874: Fixed directory traversal in cmd/go (bsc#1118898)
- CVE-2018-16875: Fixed CPU denial of service in crypto/x509 (bsc#1118899)
- CVE-2018-16886: Fixed improper authentication issue when RBAC and client-cert-auth is enabled (bsc#1121850)
- CVE-2020-15106: Fixed panic in decodeRecord method (bsc#1174951)
- CVE-2020-15112: Fixed improper checks in entry index (bsc#1174951)
- CVE-2021-28235: Fixed information discosure via debug function (bsc#1210138)
- CVE-2022-41723: Fixed quadratic complexity in HPACK decoding in net/http (bsc#1208270, bsc#1208297)
- CVE-2023-29406: Fixed insufficient sanitization of Host header in go net/http (bsc#1213229)
- CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (bsc#1217070)
- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (aka Terrapin Attack) in crypto/ssh (bsc#1217950, bsc#1218150)
Other changes:
- Added hardening to systemd service(s) (bsc#1181400)
- Fixed static /tmp file issue (bsc#1199031)
- Fixed systemd service not starting (bsc#1183703)
Full changelog:
https://github.com/etcd-io/etcd/compare/v3.3.1...v3.5.12
Patchnames: SUSE-2024-3656,openSUSE-SLE-15.5-2024-3656,openSUSE-SLE-15.6-2024-3656
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.8 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.8 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
61 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for etcd",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for etcd fixes the following issues:\n\nUpdate to version 3.5.12:\n\nSecurity fixes:\n\n- CVE-2018-16873: Fixed remote command execution in cmd/go (bsc#1118897)\n- CVE-2018-16874: Fixed directory traversal in cmd/go (bsc#1118898)\n- CVE-2018-16875: Fixed CPU denial of service in crypto/x509 (bsc#1118899)\n- CVE-2018-16886: Fixed improper authentication issue when RBAC and client-cert-auth is enabled (bsc#1121850)\n- CVE-2020-15106: Fixed panic in decodeRecord method (bsc#1174951)\n- CVE-2020-15112: Fixed improper checks in entry index (bsc#1174951)\n- CVE-2021-28235: Fixed information discosure via debug function (bsc#1210138)\n- CVE-2022-41723: Fixed quadratic complexity in HPACK decoding in net/http (bsc#1208270, bsc#1208297)\n- CVE-2023-29406: Fixed insufficient sanitization of Host header in go net/http (bsc#1213229)\n- CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (bsc#1217070)\n- CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (aka Terrapin Attack) in crypto/ssh (bsc#1217950, bsc#1218150)\n\nOther changes:\n\n- Added hardening to systemd service(s) (bsc#1181400)\n- Fixed static /tmp file issue (bsc#1199031)\n- Fixed systemd service not starting (bsc#1183703)\n\nFull changelog:\n\nhttps://github.com/etcd-io/etcd/compare/v3.3.1...v3.5.12\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-3656,openSUSE-SLE-15.5-2024-3656,openSUSE-SLE-15.6-2024-3656",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3656-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:3656-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20243656-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:3656-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-October/037265.html"
},
{
"category": "self",
"summary": "SUSE Bug 1095184",
"url": "https://bugzilla.suse.com/1095184"
},
{
"category": "self",
"summary": "SUSE Bug 1118897",
"url": "https://bugzilla.suse.com/1118897"
},
{
"category": "self",
"summary": "SUSE Bug 1118898",
"url": "https://bugzilla.suse.com/1118898"
},
{
"category": "self",
"summary": "SUSE Bug 1118899",
"url": "https://bugzilla.suse.com/1118899"
},
{
"category": "self",
"summary": "SUSE Bug 1121850",
"url": "https://bugzilla.suse.com/1121850"
},
{
"category": "self",
"summary": "SUSE Bug 1174951",
"url": "https://bugzilla.suse.com/1174951"
},
{
"category": "self",
"summary": "SUSE Bug 1181400",
"url": "https://bugzilla.suse.com/1181400"
},
{
"category": "self",
"summary": "SUSE Bug 1183703",
"url": "https://bugzilla.suse.com/1183703"
},
{
"category": "self",
"summary": "SUSE Bug 1199031",
"url": "https://bugzilla.suse.com/1199031"
},
{
"category": "self",
"summary": "SUSE Bug 1208270",
"url": "https://bugzilla.suse.com/1208270"
},
{
"category": "self",
"summary": "SUSE Bug 1208297",
"url": "https://bugzilla.suse.com/1208297"
},
{
"category": "self",
"summary": "SUSE Bug 1210138",
"url": "https://bugzilla.suse.com/1210138"
},
{
"category": "self",
"summary": "SUSE Bug 1213229",
"url": "https://bugzilla.suse.com/1213229"
},
{
"category": "self",
"summary": "SUSE Bug 1217070",
"url": "https://bugzilla.suse.com/1217070"
},
{
"category": "self",
"summary": "SUSE Bug 1217950",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "self",
"summary": "SUSE Bug 1218150",
"url": "https://bugzilla.suse.com/1218150"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16873 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16874 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16875 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16886 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15106 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-15112 page",
"url": "https://www.suse.com/security/cve/CVE-2020-15112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-28235 page",
"url": "https://www.suse.com/security/cve/CVE-2021-28235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-41723 page",
"url": "https://www.suse.com/security/cve/CVE-2022-41723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-29406 page",
"url": "https://www.suse.com/security/cve/CVE-2023-29406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-47108 page",
"url": "https://www.suse.com/security/cve/CVE-2023-47108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
}
],
"title": "Security update for etcd",
"tracking": {
"current_release_date": "2024-10-16T11:33:42Z",
"generator": {
"date": "2024-10-16T11:33:42Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:3656-1",
"initial_release_date": "2024-10-16T11:33:42Z",
"revision_history": [
{
"date": "2024-10-16T11:33:42Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "etcd-3.5.12-150000.7.6.1.aarch64",
"product": {
"name": "etcd-3.5.12-150000.7.6.1.aarch64",
"product_id": "etcd-3.5.12-150000.7.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "etcdctl-3.5.12-150000.7.6.1.aarch64",
"product": {
"name": "etcdctl-3.5.12-150000.7.6.1.aarch64",
"product_id": "etcdctl-3.5.12-150000.7.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "etcdutl-3.5.12-150000.7.6.1.aarch64",
"product": {
"name": "etcdutl-3.5.12-150000.7.6.1.aarch64",
"product_id": "etcdutl-3.5.12-150000.7.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "etcd-3.5.12-150000.7.6.1.ppc64le",
"product": {
"name": "etcd-3.5.12-150000.7.6.1.ppc64le",
"product_id": "etcd-3.5.12-150000.7.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "etcdctl-3.5.12-150000.7.6.1.ppc64le",
"product": {
"name": "etcdctl-3.5.12-150000.7.6.1.ppc64le",
"product_id": "etcdctl-3.5.12-150000.7.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "etcdutl-3.5.12-150000.7.6.1.ppc64le",
"product": {
"name": "etcdutl-3.5.12-150000.7.6.1.ppc64le",
"product_id": "etcdutl-3.5.12-150000.7.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "etcd-3.5.12-150000.7.6.1.s390x",
"product": {
"name": "etcd-3.5.12-150000.7.6.1.s390x",
"product_id": "etcd-3.5.12-150000.7.6.1.s390x"
}
},
{
"category": "product_version",
"name": "etcdctl-3.5.12-150000.7.6.1.s390x",
"product": {
"name": "etcdctl-3.5.12-150000.7.6.1.s390x",
"product_id": "etcdctl-3.5.12-150000.7.6.1.s390x"
}
},
{
"category": "product_version",
"name": "etcdutl-3.5.12-150000.7.6.1.s390x",
"product": {
"name": "etcdutl-3.5.12-150000.7.6.1.s390x",
"product_id": "etcdutl-3.5.12-150000.7.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "etcd-3.5.12-150000.7.6.1.x86_64",
"product": {
"name": "etcd-3.5.12-150000.7.6.1.x86_64",
"product_id": "etcd-3.5.12-150000.7.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "etcdctl-3.5.12-150000.7.6.1.x86_64",
"product": {
"name": "etcdctl-3.5.12-150000.7.6.1.x86_64",
"product_id": "etcdctl-3.5.12-150000.7.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "etcdutl-3.5.12-150000.7.6.1.x86_64",
"product": {
"name": "etcdutl-3.5.12-150000.7.6.1.x86_64",
"product_id": "etcdutl-3.5.12-150000.7.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-3.5.12-150000.7.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64"
},
"product_reference": "etcd-3.5.12-150000.7.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcdctl-3.5.12-150000.7.6.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
},
"product_reference": "etcdctl-3.5.12-150000.7.6.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-16873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16873"
}
],
"notes": [
{
"category": "general",
"text": "In Go before 1.10.6 and 1.11.x before 1.11.3, the \"go get\" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). Using custom domains, it\u0027s possible to arrange things so that a Git repository is cloned to a folder named \".git\" by using a vanity import path that ends with \"/.git\". If the Git repository root contains a \"HEAD\" file, a \"config\" file, an \"objects\" directory, a \"refs\" directory, with some work to ensure the proper ordering of operations, \"go get -u\" can be tricked into considering the parent directory as a repository root, and running Git commands on it. That will use the \"config\" file in the original Git repository root for its configuration, and if that config file contains malicious commands, they will execute on the system running \"go get -u\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16873",
"url": "https://www.suse.com/security/cve/CVE-2018-16873"
},
{
"category": "external",
"summary": "SUSE Bug 1118897 for CVE-2018-16873",
"url": "https://bugzilla.suse.com/1118897"
},
{
"category": "external",
"summary": "SUSE Bug 1118898 for CVE-2018-16873",
"url": "https://bugzilla.suse.com/1118898"
},
{
"category": "external",
"summary": "SUSE Bug 1118899 for CVE-2018-16873",
"url": "https://bugzilla.suse.com/1118899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "important"
}
],
"title": "CVE-2018-16873"
},
{
"cve": "CVE-2018-16874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16874"
}
],
"notes": [
{
"category": "general",
"text": "In Go before 1.10.6 and 1.11.x before 1.11.3, the \"go get\" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both \u0027{\u0027 and \u0027}\u0027 characters). Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which can lead to code execution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16874",
"url": "https://www.suse.com/security/cve/CVE-2018-16874"
},
{
"category": "external",
"summary": "SUSE Bug 1118897 for CVE-2018-16874",
"url": "https://bugzilla.suse.com/1118897"
},
{
"category": "external",
"summary": "SUSE Bug 1118898 for CVE-2018-16874",
"url": "https://bugzilla.suse.com/1118898"
},
{
"category": "external",
"summary": "SUSE Bug 1118899 for CVE-2018-16874",
"url": "https://bugzilla.suse.com/1118899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "moderate"
}
],
"title": "CVE-2018-16874"
},
{
"cve": "CVE-2018-16875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16875"
}
],
"notes": [
{
"category": "general",
"text": "The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16875",
"url": "https://www.suse.com/security/cve/CVE-2018-16875"
},
{
"category": "external",
"summary": "SUSE Bug 1118897 for CVE-2018-16875",
"url": "https://bugzilla.suse.com/1118897"
},
{
"category": "external",
"summary": "SUSE Bug 1118898 for CVE-2018-16875",
"url": "https://bugzilla.suse.com/1118898"
},
{
"category": "external",
"summary": "SUSE Bug 1118899 for CVE-2018-16875",
"url": "https://bugzilla.suse.com/1118899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "moderate"
}
],
"title": "CVE-2018-16875"
},
{
"cve": "CVE-2018-16886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16886"
}
],
"notes": [
{
"category": "general",
"text": "etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16886",
"url": "https://www.suse.com/security/cve/CVE-2018-16886"
},
{
"category": "external",
"summary": "SUSE Bug 1121850 for CVE-2018-16886",
"url": "https://bugzilla.suse.com/1121850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "moderate"
}
],
"title": "CVE-2018-16886"
},
{
"cve": "CVE-2020-15106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15106"
}
],
"notes": [
{
"category": "general",
"text": "In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15106",
"url": "https://www.suse.com/security/cve/CVE-2020-15106"
},
{
"category": "external",
"summary": "SUSE Bug 1174951 for CVE-2020-15106",
"url": "https://bugzilla.suse.com/1174951"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "moderate"
}
],
"title": "CVE-2020-15106"
},
{
"cve": "CVE-2020-15112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-15112"
}
],
"notes": [
{
"category": "general",
"text": "In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-15112",
"url": "https://www.suse.com/security/cve/CVE-2020-15112"
},
{
"category": "external",
"summary": "SUSE Bug 1174951 for CVE-2020-15112",
"url": "https://bugzilla.suse.com/1174951"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "moderate"
}
],
"title": "CVE-2020-15112"
},
{
"cve": "CVE-2021-28235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-28235"
}
],
"notes": [
{
"category": "general",
"text": "Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-28235",
"url": "https://www.suse.com/security/cve/CVE-2021-28235"
},
{
"category": "external",
"summary": "SUSE Bug 1210138 for CVE-2021-28235",
"url": "https://bugzilla.suse.com/1210138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "important"
}
],
"title": "CVE-2021-28235"
},
{
"cve": "CVE-2022-41723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-41723"
}
],
"notes": [
{
"category": "general",
"text": "A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-41723",
"url": "https://www.suse.com/security/cve/CVE-2022-41723"
},
{
"category": "external",
"summary": "SUSE Bug 1208270 for CVE-2022-41723",
"url": "https://bugzilla.suse.com/1208270"
},
{
"category": "external",
"summary": "SUSE Bug 1215588 for CVE-2022-41723",
"url": "https://bugzilla.suse.com/1215588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "important"
}
],
"title": "CVE-2022-41723"
},
{
"cve": "CVE-2023-29406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-29406"
}
],
"notes": [
{
"category": "general",
"text": "The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-29406",
"url": "https://www.suse.com/security/cve/CVE-2023-29406"
},
{
"category": "external",
"summary": "SUSE Bug 1213229 for CVE-2023-29406",
"url": "https://bugzilla.suse.com/1213229"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "moderate"
}
],
"title": "CVE-2023-29406"
},
{
"cve": "CVE-2023-47108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-47108"
}
],
"notes": [
{
"category": "general",
"text": "OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server\u0027s potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-47108",
"url": "https://www.suse.com/security/cve/CVE-2023-47108"
},
{
"category": "external",
"summary": "SUSE Bug 1217070 for CVE-2023-47108",
"url": "https://bugzilla.suse.com/1217070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "important"
}
],
"title": "CVE-2023-47108"
},
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.5:etcdctl-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcd-3.5.12-150000.7.6.1.x86_64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.aarch64",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.ppc64le",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.s390x",
"openSUSE Leap 15.6:etcdctl-3.5.12-150000.7.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-10-16T11:33:42Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
}
]
}
SUSE-SU-2025:20009-1
Vulnerability from csaf_suse - Published: 2025-02-03 08:47 - Updated: 2025-02-03 08:47Summary
Security update for openssh
Severity
Critical
Notes
Title of the patch: Security update for openssh
Description of the patch: This update for openssh fixes the following issues:
- CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318)
- CVE-2024-6387: Fixed race condition in a signal handler (bsc#1226642).
Patchnames: SUSE-SLE-Micro-6.0-8
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
23 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssh fixes the following issues:\n\n- CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318)\n- CVE-2024-6387: Fixed race condition in a signal handler (bsc#1226642).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-8",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20009-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:20009-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520009-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:20009-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021369.html"
},
{
"category": "self",
"summary": "SUSE Bug 1217950",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "self",
"summary": "SUSE Bug 1218215",
"url": "https://bugzilla.suse.com/1218215"
},
{
"category": "self",
"summary": "SUSE Bug 1226642",
"url": "https://bugzilla.suse.com/1226642"
},
{
"category": "self",
"summary": "SUSE Bug 1227318",
"url": "https://bugzilla.suse.com/1227318"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-48795 page",
"url": "https://www.suse.com/security/cve/CVE-2023-48795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-51385 page",
"url": "https://www.suse.com/security/cve/CVE-2023-51385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39894 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-6387 page",
"url": "https://www.suse.com/security/cve/CVE-2024-6387/"
}
],
"title": "Security update for openssh",
"tracking": {
"current_release_date": "2025-02-03T08:47:06Z",
"generator": {
"date": "2025-02-03T08:47:06Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:20009-1",
"initial_release_date": "2025-02-03T08:47:06Z",
"revision_history": [
{
"date": "2025-02-03T08:47:06Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssh-9.6p1-2.1.aarch64",
"product": {
"name": "openssh-9.6p1-2.1.aarch64",
"product_id": "openssh-9.6p1-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssh-clients-9.6p1-2.1.aarch64",
"product": {
"name": "openssh-clients-9.6p1-2.1.aarch64",
"product_id": "openssh-clients-9.6p1-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssh-common-9.6p1-2.1.aarch64",
"product": {
"name": "openssh-common-9.6p1-2.1.aarch64",
"product_id": "openssh-common-9.6p1-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssh-fips-9.6p1-2.1.aarch64",
"product": {
"name": "openssh-fips-9.6p1-2.1.aarch64",
"product_id": "openssh-fips-9.6p1-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssh-server-9.6p1-2.1.aarch64",
"product": {
"name": "openssh-server-9.6p1-2.1.aarch64",
"product_id": "openssh-server-9.6p1-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"product": {
"name": "openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"product_id": "openssh-server-config-rootlogin-9.6p1-2.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-9.6p1-2.1.s390x",
"product": {
"name": "openssh-9.6p1-2.1.s390x",
"product_id": "openssh-9.6p1-2.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-clients-9.6p1-2.1.s390x",
"product": {
"name": "openssh-clients-9.6p1-2.1.s390x",
"product_id": "openssh-clients-9.6p1-2.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-common-9.6p1-2.1.s390x",
"product": {
"name": "openssh-common-9.6p1-2.1.s390x",
"product_id": "openssh-common-9.6p1-2.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-fips-9.6p1-2.1.s390x",
"product": {
"name": "openssh-fips-9.6p1-2.1.s390x",
"product_id": "openssh-fips-9.6p1-2.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-server-9.6p1-2.1.s390x",
"product": {
"name": "openssh-server-9.6p1-2.1.s390x",
"product_id": "openssh-server-9.6p1-2.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"product": {
"name": "openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"product_id": "openssh-server-config-rootlogin-9.6p1-2.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-9.6p1-2.1.x86_64",
"product": {
"name": "openssh-9.6p1-2.1.x86_64",
"product_id": "openssh-9.6p1-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-clients-9.6p1-2.1.x86_64",
"product": {
"name": "openssh-clients-9.6p1-2.1.x86_64",
"product_id": "openssh-clients-9.6p1-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-common-9.6p1-2.1.x86_64",
"product": {
"name": "openssh-common-9.6p1-2.1.x86_64",
"product_id": "openssh-common-9.6p1-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-fips-9.6p1-2.1.x86_64",
"product": {
"name": "openssh-fips-9.6p1-2.1.x86_64",
"product_id": "openssh-fips-9.6p1-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-server-9.6p1-2.1.x86_64",
"product": {
"name": "openssh-server-9.6p1-2.1.x86_64",
"product_id": "openssh-server-9.6p1-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-server-config-rootlogin-9.6p1-2.1.x86_64",
"product": {
"name": "openssh-server-config-rootlogin-9.6p1-2.1.x86_64",
"product_id": "openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-9.6p1-2.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64"
},
"product_reference": "openssh-9.6p1-2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-9.6p1-2.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x"
},
"product_reference": "openssh-9.6p1-2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-9.6p1-2.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64"
},
"product_reference": "openssh-9.6p1-2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-9.6p1-2.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64"
},
"product_reference": "openssh-clients-9.6p1-2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-9.6p1-2.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x"
},
"product_reference": "openssh-clients-9.6p1-2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-clients-9.6p1-2.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64"
},
"product_reference": "openssh-clients-9.6p1-2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-common-9.6p1-2.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64"
},
"product_reference": "openssh-common-9.6p1-2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-common-9.6p1-2.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x"
},
"product_reference": "openssh-common-9.6p1-2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-common-9.6p1-2.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64"
},
"product_reference": "openssh-common-9.6p1-2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-9.6p1-2.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64"
},
"product_reference": "openssh-fips-9.6p1-2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-9.6p1-2.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x"
},
"product_reference": "openssh-fips-9.6p1-2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-9.6p1-2.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64"
},
"product_reference": "openssh-fips-9.6p1-2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-9.6p1-2.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64"
},
"product_reference": "openssh-server-9.6p1-2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-9.6p1-2.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x"
},
"product_reference": "openssh-server-9.6p1-2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-9.6p1-2.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64"
},
"product_reference": "openssh-server-9.6p1-2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-config-rootlogin-9.6p1-2.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64"
},
"product_reference": "openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-config-rootlogin-9.6p1-2.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x"
},
"product_reference": "openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-server-config-rootlogin-9.6p1-2.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
},
"product_reference": "openssh-server-config-rootlogin-9.6p1-2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-48795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-48795"
}
],
"notes": [
{
"category": "general",
"text": "The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0027s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-48795",
"url": "https://www.suse.com/security/cve/CVE-2023-48795"
},
{
"category": "external",
"summary": "SUSE Bug 1217950 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1217950"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-48795",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-03T08:47:06Z",
"details": "important"
}
],
"title": "CVE-2023-48795"
},
{
"cve": "CVE-2023-51385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-51385"
}
],
"notes": [
{
"category": "general",
"text": "In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-51385",
"url": "https://www.suse.com/security/cve/CVE-2023-51385"
},
{
"category": "external",
"summary": "SUSE Bug 1218215 for CVE-2023-51385",
"url": "https://bugzilla.suse.com/1218215"
},
{
"category": "external",
"summary": "SUSE Bug 1218708 for CVE-2023-51385",
"url": "https://bugzilla.suse.com/1218708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-03T08:47:06Z",
"details": "moderate"
}
],
"title": "CVE-2023-51385"
},
{
"cve": "CVE-2024-39894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39894"
}
],
"notes": [
{
"category": "general",
"text": "OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39894",
"url": "https://www.suse.com/security/cve/CVE-2024-39894"
},
{
"category": "external",
"summary": "SUSE Bug 1227318 for CVE-2024-39894",
"url": "https://bugzilla.suse.com/1227318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-03T08:47:06Z",
"details": "moderate"
}
],
"title": "CVE-2024-39894"
},
{
"cve": "CVE-2024-6387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-6387"
}
],
"notes": [
{
"category": "general",
"text": "A security regression (CVE-2006-5051) was discovered in OpenSSH\u0027s server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-6387",
"url": "https://www.suse.com/security/cve/CVE-2024-6387"
},
{
"category": "external",
"summary": "SUSE Bug 1226641 for CVE-2024-6387",
"url": "https://bugzilla.suse.com/1226641"
},
{
"category": "external",
"summary": "SUSE Bug 1226642 for CVE-2024-6387",
"url": "https://bugzilla.suse.com/1226642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-clients-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-common-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-fips-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-9.6p1-2.1.x86_64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.aarch64",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.s390x",
"SUSE Linux Micro 6.0:openssh-server-config-rootlogin-9.6p1-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-03T08:47:06Z",
"details": "important"
}
],
"title": "CVE-2024-6387"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…