Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-4000 (GCVE-0-2015-4000)
Vulnerability from cvelistv5 – Published: 2015-05-21 00:00 – Updated: 2026-05-27 16:22
VLAI
EPSS
Summary
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
Severity
CWE
- n/a
Assigner
References
219 references
Date Public
2015-05-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T06:04:02.725Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "SUSE-SU-2015:1184",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html"
},
{
"name": "SUSE-SU-2015:1177",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html"
},
{
"name": "SSRT102180",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2"
},
{
"name": "RHSA-2015:1243",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
},
{
"name": "openSUSE-SU-2015:1229",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html"
},
{
"name": "1033208",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033208"
},
{
"name": "1032637",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032637"
},
{
"name": "HPSBGN03404",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144050121701297\u0026w=2"
},
{
"name": "DSA-3688",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3688"
},
{
"name": "DSA-3287",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3287"
},
{
"name": "HPSBUX03512",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"name": "1032865",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032865"
},
{
"name": "HPSBGN03351",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143557934009303\u0026w=2"
},
{
"name": "SUSE-SU-2015:1268",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html"
},
{
"name": "SUSE-SU-2015:1150",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html"
},
{
"name": "1034728",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1034728"
},
{
"name": "SUSE-SU-2015:1183",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html"
},
{
"name": "1032656",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032656"
},
{
"name": "RHSA-2016:2056",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2056.html"
},
{
"name": "[oss-security] 20150520 CVE-2015-4000 - TLS does not properly convey server\u0027s ciphersuite choice",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2015/05/20/8"
},
{
"name": "openSUSE-SU-2015:1684",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html"
},
{
"name": "HPSBGN03361",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143628304012255\u0026w=2"
},
{
"name": "HPSBGN03399",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144060576831314\u0026w=2"
},
{
"name": "1032475",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032475"
},
{
"name": "1032960",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032960"
},
{
"name": "openSUSE-SU-2016:0255",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html"
},
{
"name": "1032653",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032653"
},
{
"name": "SUSE-SU-2016:0224",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html"
},
{
"name": "1033385",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033385"
},
{
"name": "GLSA-201512-10",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201512-10"
},
{
"name": "RHSA-2015:1229",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
},
{
"name": "openSUSE-SU-2016:0483",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html"
},
{
"name": "1032864",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032864"
},
{
"name": "1032910",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032910"
},
{
"name": "1032645",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032645"
},
{
"name": "USN-2706-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2706-1"
},
{
"name": "GLSA-201701-46",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201701-46"
},
{
"name": "RHSA-2015:1526",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
},
{
"name": "1033760",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033760"
},
{
"name": "RHSA-2015:1485",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
},
{
"name": "RHSA-2015:1197",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1197.html"
},
{
"name": "HPSBMU03401",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144104533800819\u0026w=2"
},
{
"name": "1032699",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032699"
},
{
"name": "1032476",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032476"
},
{
"name": "1032649",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032649"
},
{
"name": "HPSBMU03345",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144043644216842\u0026w=2"
},
{
"name": "HPSBUX03363",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143637549705650\u0026w=2"
},
{
"name": "RHSA-2015:1544",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
},
{
"name": "FEDORA-2015-9130",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html"
},
{
"name": "SUSE-SU-2015:1182",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html"
},
{
"name": "SSRT102112",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196"
},
{
"name": "1032688",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032688"
},
{
"name": "SUSE-SU-2015:1143",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html"
},
{
"name": "1032652",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032652"
},
{
"name": "FEDORA-2015-9048",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html"
},
{
"name": "RHSA-2015:1185",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1185.html"
},
{
"name": "HPSBGN03362",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143558092609708\u0026w=2"
},
{
"name": "APPLE-SA-2015-06-30-2",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"name": "openSUSE-SU-2015:1289",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
},
{
"name": "FEDORA-2015-9161",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html"
},
{
"name": "HPSBGN03402",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144069189622016\u0026w=2"
},
{
"name": "1032648",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032648"
},
{
"name": "1032759",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032759"
},
{
"name": "RHSA-2015:1228",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
},
{
"name": "HPSBGN03405",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144060606031437\u0026w=2"
},
{
"name": "DSA-3316",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3316"
},
{
"name": "1033209",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033209"
},
{
"name": "1032871",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032871"
},
{
"name": "DSA-3324",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3324"
},
{
"name": "1032655",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032655"
},
{
"name": "1033210",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033210"
},
{
"name": "HPSBGN03411",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144061542602287\u0026w=2"
},
{
"name": "openSUSE-SU-2015:1277",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html"
},
{
"name": "HPSBGN03533",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=145409266329539\u0026w=2"
},
{
"name": "USN-2673-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2673-1"
},
{
"name": "1034884",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1034884"
},
{
"name": "HPSBMU03356",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143506486712441\u0026w=2"
},
{
"name": "GLSA-201603-11",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201603-11"
},
{
"name": "1033064",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033064"
},
{
"name": "SUSE-SU-2015:1181",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html"
},
{
"name": "1032778",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032778"
},
{
"name": "1032474",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032474"
},
{
"name": "SSRT102254",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"name": "HPSBGN03407",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144102017024820\u0026w=2"
},
{
"name": "openSUSE-SU-2015:1209",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html"
},
{
"name": "1032784",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032784"
},
{
"name": "1032777",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032777"
},
{
"name": "1033416",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033416"
},
{
"name": "1033991",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033991"
},
{
"name": "1032647",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032647"
},
{
"name": "1032654",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032654"
},
{
"name": "1033341",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033341"
},
{
"name": "RHSA-2015:1486",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
},
{
"name": "SUSE-SU-2015:1663",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html"
},
{
"name": "1033433",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033433"
},
{
"name": "USN-2696-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2696-1"
},
{
"name": "APPLE-SA-2015-06-30-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html"
},
{
"name": "1032702",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032702"
},
{
"name": "DSA-3339",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3339"
},
{
"name": "1032727",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032727"
},
{
"name": "RHSA-2015:1242",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
},
{
"name": "SUSE-SU-2015:1269",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html"
},
{
"name": "GLSA-201506-02",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201506-02"
},
{
"name": "91787",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/91787"
},
{
"name": "RHSA-2016:1624",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1624.html"
},
{
"name": "openSUSE-SU-2015:1266",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html"
},
{
"name": "RHSA-2015:1488",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
},
{
"name": "SUSE-SU-2015:1319",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
},
{
"name": "SUSE-SU-2015:1320",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
},
{
"name": "1033430",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033430"
},
{
"name": "openSUSE-SU-2015:1288",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
},
{
"name": "RHSA-2015:1241",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
},
{
"name": "openSUSE-SU-2016:0478",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html"
},
{
"name": "SUSE-SU-2015:1581",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"name": "HPSBUX03388",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2"
},
{
"name": "RHSA-2015:1230",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
},
{
"name": "74733",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/74733"
},
{
"name": "openSUSE-SU-2016:0261",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html"
},
{
"name": "1032651",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032651"
},
{
"name": "1033065",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033065"
},
{
"name": "USN-2656-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2656-1"
},
{
"name": "SUSE-SU-2015:1185",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html"
},
{
"name": "1033222",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033222"
},
{
"name": "1036218",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1036218"
},
{
"name": "SUSE-SU-2015:1449",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html"
},
{
"name": "HPSBGN03373",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143655800220052\u0026w=2"
},
{
"name": "1040630",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1040630"
},
{
"name": "openSUSE-SU-2015:1139",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html"
},
{
"name": "1034087",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1034087"
},
{
"name": "1033513",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033513"
},
{
"name": "1032884",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032884"
},
{
"name": "RHSA-2015:1604",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
},
{
"name": "SUSE-SU-2016:0262",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html"
},
{
"name": "1032932",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032932"
},
{
"name": "1033891",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033891"
},
{
"name": "openSUSE-SU-2016:0226",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html"
},
{
"name": "1032783",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032783"
},
{
"name": "1032856",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032856"
},
{
"name": "NetBSD-SA2015-008",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc"
},
{
"name": "DSA-3300",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.debian.org/security/2015/dsa-3300"
},
{
"name": "USN-2656-2",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-2656-2"
},
{
"name": "1033067",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033067"
},
{
"name": "1033019",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1033019"
},
{
"name": "RHSA-2015:1072",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1072.html"
},
{
"name": "1032650",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1032650"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10681"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962739"
},
{
"tags": [
"x_transferred"
],
"url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10122"
},
{
"tags": [
"x_transferred"
],
"url": "http://support.apple.com/kb/HT204941"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21962816"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959812"
},
{
"tags": [
"x_transferred"
],
"url": "https://www-304.ibm.com/support/docview.wss?uid=swg21959745"
},
{
"tags": [
"x_transferred"
],
"url": "https://weakdh.org/imperfect-forward-secrecy.pdf"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21959132"
},
{
"tags": [
"x_transferred"
],
"url": "https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959539"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959325"
},
{
"tags": [
"x_transferred"
],
"url": "https://openssl.org/news/secadv/20150611.txt"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03831en_us"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21967893"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21958984"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959517"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959195"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21961717"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960041"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960194"
},
{
"tags": [
"x_transferred"
],
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959453"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20150619-0001/"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959111"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960418"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.suse.com/security/cve/CVE-2015-4000.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722"
},
{
"tags": [
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX201114"
},
{
"tags": [
"x_transferred"
],
"url": "http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960380"
},
{
"tags": [
"x_transferred"
],
"url": "http://support.apple.com/kb/HT204942"
},
{
"tags": [
"x_transferred"
],
"url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083"
},
{
"tags": [
"x_transferred"
],
"url": "http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc"
},
{
"tags": [
"x_transferred"
],
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959530"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21960191"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959636"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
},
{
"tags": [
"x_transferred"
],
"url": "https://puppet.com/security/cve/CVE-2015-4000"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.mozilla.org/security/announce/2015/mfsa2015-70.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.citrix.com/article/CTX216642"
},
{
"tags": [
"x_transferred"
],
"url": "https://weakdh.org/"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959481"
},
{
"tags": [
"x_transferred"
],
"url": "https://bto.bluecoat.com/security-advisory/sa98"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1138554"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962455"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openssl.org/news/secadv_20150611.txt"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.fortiguard.com/advisory/2015-05-20-logjam-attack"
},
{
"tags": [
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2015-4000",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-27T16:22:15.524106Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295 Improper Certificate Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-27T16:22:20.395Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-05-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-12-13T00:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "SUSE-SU-2015:1184",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html"
},
{
"name": "SUSE-SU-2015:1177",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html"
},
{
"name": "SSRT102180",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2"
},
{
"name": "RHSA-2015:1243",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
},
{
"name": "openSUSE-SU-2015:1229",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html"
},
{
"name": "1033208",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033208"
},
{
"name": "1032637",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032637"
},
{
"name": "HPSBGN03404",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144050121701297\u0026w=2"
},
{
"name": "DSA-3688",
"tags": [
"vendor-advisory"
],
"url": "http://www.debian.org/security/2016/dsa-3688"
},
{
"name": "DSA-3287",
"tags": [
"vendor-advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3287"
},
{
"name": "HPSBUX03512",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"name": "1032865",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032865"
},
{
"name": "HPSBGN03351",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143557934009303\u0026w=2"
},
{
"name": "SUSE-SU-2015:1268",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html"
},
{
"name": "SUSE-SU-2015:1150",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html"
},
{
"name": "1034728",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1034728"
},
{
"name": "SUSE-SU-2015:1183",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html"
},
{
"name": "1032656",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032656"
},
{
"name": "RHSA-2016:2056",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2056.html"
},
{
"name": "[oss-security] 20150520 CVE-2015-4000 - TLS does not properly convey server\u0027s ciphersuite choice",
"tags": [
"mailing-list"
],
"url": "http://openwall.com/lists/oss-security/2015/05/20/8"
},
{
"name": "openSUSE-SU-2015:1684",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html"
},
{
"name": "HPSBGN03361",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143628304012255\u0026w=2"
},
{
"name": "HPSBGN03399",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144060576831314\u0026w=2"
},
{
"name": "1032475",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032475"
},
{
"name": "1032960",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032960"
},
{
"name": "openSUSE-SU-2016:0255",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html"
},
{
"name": "1032653",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032653"
},
{
"name": "SUSE-SU-2016:0224",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html"
},
{
"name": "1033385",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033385"
},
{
"name": "GLSA-201512-10",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/201512-10"
},
{
"name": "RHSA-2015:1229",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
},
{
"name": "openSUSE-SU-2016:0483",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html"
},
{
"name": "1032864",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032864"
},
{
"name": "1032910",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032910"
},
{
"name": "1032645",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032645"
},
{
"name": "USN-2706-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2706-1"
},
{
"name": "GLSA-201701-46",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/201701-46"
},
{
"name": "RHSA-2015:1526",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
},
{
"name": "1033760",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033760"
},
{
"name": "RHSA-2015:1485",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
},
{
"name": "RHSA-2015:1197",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1197.html"
},
{
"name": "HPSBMU03401",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144104533800819\u0026w=2"
},
{
"name": "1032699",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032699"
},
{
"name": "1032476",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032476"
},
{
"name": "1032649",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032649"
},
{
"name": "HPSBMU03345",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144043644216842\u0026w=2"
},
{
"name": "HPSBUX03363",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143637549705650\u0026w=2"
},
{
"name": "RHSA-2015:1544",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
},
{
"name": "FEDORA-2015-9130",
"tags": [
"vendor-advisory"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html"
},
{
"name": "SUSE-SU-2015:1182",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html"
},
{
"name": "SSRT102112",
"tags": [
"vendor-advisory"
],
"url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196"
},
{
"name": "1032688",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032688"
},
{
"name": "SUSE-SU-2015:1143",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html"
},
{
"name": "1032652",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032652"
},
{
"name": "FEDORA-2015-9048",
"tags": [
"vendor-advisory"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html"
},
{
"name": "RHSA-2015:1185",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1185.html"
},
{
"name": "HPSBGN03362",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143558092609708\u0026w=2"
},
{
"name": "APPLE-SA-2015-06-30-2",
"tags": [
"vendor-advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
},
{
"name": "openSUSE-SU-2015:1289",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
},
{
"name": "FEDORA-2015-9161",
"tags": [
"vendor-advisory"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html"
},
{
"name": "HPSBGN03402",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144069189622016\u0026w=2"
},
{
"name": "1032648",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032648"
},
{
"name": "1032759",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032759"
},
{
"name": "RHSA-2015:1228",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
},
{
"name": "HPSBGN03405",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144060606031437\u0026w=2"
},
{
"name": "DSA-3316",
"tags": [
"vendor-advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3316"
},
{
"name": "1033209",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033209"
},
{
"name": "1032871",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032871"
},
{
"name": "DSA-3324",
"tags": [
"vendor-advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3324"
},
{
"name": "1032655",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032655"
},
{
"name": "1033210",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033210"
},
{
"name": "HPSBGN03411",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144061542602287\u0026w=2"
},
{
"name": "openSUSE-SU-2015:1277",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html"
},
{
"name": "HPSBGN03533",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=145409266329539\u0026w=2"
},
{
"name": "USN-2673-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2673-1"
},
{
"name": "1034884",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1034884"
},
{
"name": "HPSBMU03356",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143506486712441\u0026w=2"
},
{
"name": "GLSA-201603-11",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/201603-11"
},
{
"name": "1033064",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033064"
},
{
"name": "SUSE-SU-2015:1181",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html"
},
{
"name": "1032778",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032778"
},
{
"name": "1032474",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032474"
},
{
"name": "SSRT102254",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2"
},
{
"name": "HPSBGN03407",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=144102017024820\u0026w=2"
},
{
"name": "openSUSE-SU-2015:1209",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html"
},
{
"name": "1032784",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032784"
},
{
"name": "1032777",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032777"
},
{
"name": "1033416",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033416"
},
{
"name": "1033991",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033991"
},
{
"name": "1032647",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032647"
},
{
"name": "1032654",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032654"
},
{
"name": "1033341",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033341"
},
{
"name": "RHSA-2015:1486",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
},
{
"name": "SUSE-SU-2015:1663",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html"
},
{
"name": "1033433",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033433"
},
{
"name": "USN-2696-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2696-1"
},
{
"name": "APPLE-SA-2015-06-30-1",
"tags": [
"vendor-advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html"
},
{
"name": "1032702",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032702"
},
{
"name": "DSA-3339",
"tags": [
"vendor-advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3339"
},
{
"name": "1032727",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032727"
},
{
"name": "RHSA-2015:1242",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
},
{
"name": "SUSE-SU-2015:1269",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html"
},
{
"name": "GLSA-201506-02",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/201506-02"
},
{
"name": "91787",
"tags": [
"vdb-entry"
],
"url": "http://www.securityfocus.com/bid/91787"
},
{
"name": "RHSA-2016:1624",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1624.html"
},
{
"name": "openSUSE-SU-2015:1266",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html"
},
{
"name": "RHSA-2015:1488",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
},
{
"name": "SUSE-SU-2015:1319",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
},
{
"name": "SUSE-SU-2015:1320",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
},
{
"name": "1033430",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033430"
},
{
"name": "openSUSE-SU-2015:1288",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
},
{
"name": "RHSA-2015:1241",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
},
{
"name": "openSUSE-SU-2016:0478",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html"
},
{
"name": "SUSE-SU-2015:1581",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html"
},
{
"name": "HPSBUX03388",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2"
},
{
"name": "RHSA-2015:1230",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
},
{
"name": "74733",
"tags": [
"vdb-entry"
],
"url": "http://www.securityfocus.com/bid/74733"
},
{
"name": "openSUSE-SU-2016:0261",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html"
},
{
"name": "1032651",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032651"
},
{
"name": "1033065",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033065"
},
{
"name": "USN-2656-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2656-1"
},
{
"name": "SUSE-SU-2015:1185",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html"
},
{
"name": "1033222",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033222"
},
{
"name": "1036218",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1036218"
},
{
"name": "SUSE-SU-2015:1449",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html"
},
{
"name": "HPSBGN03373",
"tags": [
"vendor-advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=143655800220052\u0026w=2"
},
{
"name": "1040630",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1040630"
},
{
"name": "openSUSE-SU-2015:1139",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html"
},
{
"name": "1034087",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1034087"
},
{
"name": "1033513",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033513"
},
{
"name": "1032884",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032884"
},
{
"name": "RHSA-2015:1604",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
},
{
"name": "SUSE-SU-2016:0262",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html"
},
{
"name": "1032932",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032932"
},
{
"name": "1033891",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033891"
},
{
"name": "openSUSE-SU-2016:0226",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html"
},
{
"name": "1032783",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032783"
},
{
"name": "1032856",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032856"
},
{
"name": "NetBSD-SA2015-008",
"tags": [
"vendor-advisory"
],
"url": "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc"
},
{
"name": "DSA-3300",
"tags": [
"vendor-advisory"
],
"url": "http://www.debian.org/security/2015/dsa-3300"
},
{
"name": "USN-2656-2",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-2656-2"
},
{
"name": "1033067",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033067"
},
{
"name": "1033019",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1033019"
},
{
"name": "RHSA-2015:1072",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2015-1072.html"
},
{
"name": "1032650",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1032650"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"url": "https://www.oracle.com/security-alerts/cpujan2021.html"
},
{
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10681"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962739"
},
{
"url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10122"
},
{
"url": "http://support.apple.com/kb/HT204941"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21962816"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959812"
},
{
"url": "https://www-304.ibm.com/support/docview.wss?uid=swg21959745"
},
{
"url": "https://weakdh.org/imperfect-forward-secrecy.pdf"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21959132"
},
{
"url": "https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959539"
},
{
"url": "https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959325"
},
{
"url": "https://openssl.org/news/secadv/20150611.txt"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html"
},
{
"url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778"
},
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03831en_us"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21967893"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21958984"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959517"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959195"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21961717"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960041"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960194"
},
{
"url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959453"
},
{
"url": "https://security.netapp.com/advisory/ntap-20150619-0001/"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959111"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960418"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246"
},
{
"url": "https://www.suse.com/security/cve/CVE-2015-4000.html"
},
{
"url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722"
},
{
"url": "http://support.citrix.com/article/CTX201114"
},
{
"url": "http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery"
},
{
"url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960380"
},
{
"url": "http://support.apple.com/kb/HT204942"
},
{
"url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083"
},
{
"url": "http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc"
},
{
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959530"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21960191"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959636"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763"
},
{
"url": "https://puppet.com/security/cve/CVE-2015-4000"
},
{
"url": "http://www.mozilla.org/security/announce/2015/mfsa2015-70.html"
},
{
"url": "http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789"
},
{
"url": "https://support.citrix.com/article/CTX216642"
},
{
"url": "https://weakdh.org/"
},
{
"url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959481"
},
{
"url": "https://bto.bluecoat.com/security-advisory/sa98"
},
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1138554"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962455"
},
{
"url": "https://www.openssl.org/news/secadv_20150611.txt"
},
{
"url": "http://www.fortiguard.com/advisory/2015-05-20-logjam-attack"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2015-4000",
"datePublished": "2015-05-21T00:00:00.000Z",
"dateReserved": "2015-05-15T00:00:00.000Z",
"dateUpdated": "2026-05-27T16:22:20.395Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2015-4000",
"date": "2026-05-30",
"epss": "0.92346",
"percentile": "0.99739"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2015-4000\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-05-21T00:59:00.087\",\"lastModified\":\"2026-05-27T17:16:21.013\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \\\"Logjam\\\" issue.\"},{\"lang\":\"es\",\"value\":\"El protocolo TLS 1.2 y anteriores, cuando una suite de cifrado DHE_EXPORT est\u00e1 habilitada en un servidor pero no en un cliente, no transporta una elecci\u00f3n DHE_EXPORT, lo que permite a atacantes man-in-the-middle realizar ataques de degradaci\u00f3n del cifrado mediante la rescritura de un ClientHello con DHE remplazado por DHE_EXPORT y posteriormente la rescritura de un ServerHello con DHE_EXPORT remplazado por DHE, tambi\u00e9n conocido como el problema \u0027Logjam\u0027.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N\",\"baseScore\":3.7,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":1.4}],\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N\",\"baseScore\":3.7,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-310\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.1\",\"versionEndIncluding\":\"1.0.1m\",\"matchCriteriaId\":\"51F16DD0-B15A-4B29-B68A-D6ABA0BF9623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.2\",\"versionEndIncluding\":\"1.0.2a\",\"matchCriteriaId\":\"86B99FE0-EFEF-4C34-9790-A14504D701C5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49A63F39-30BE-443F-AF10-6245587D3359\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F38D3B7E-8429-473F-BB31-FC3583EE5A5B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.0.1m\",\"matchCriteriaId\":\"C4D0AB50-9195-4B1B-BB76-00F0A34C9389\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B64BBA96-FB3C-46AC-9A29-50EE02714FE9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:content_manager:8.5:*:*:*:*:enterprise:*:*\",\"matchCriteriaId\":\"EB672C2E-8ABF-40CD-97DA-28D939DE4C63\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jrockit:r28.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"228C7B8D-18EE-444A-8067-6C222844FB8C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.6.0:update95:*:*:*:*:*:*\",\"matchCriteriaId\":\"2755C397-75DF-4110-8C8A-05EFDFFF9BC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update75:*:*:*:*:*:*\",\"matchCriteriaId\":\"D084DBE9-BF2F-4A9B-8FDE-A9A608E6B40F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update80:*:*:*:*:*:*\",\"matchCriteriaId\":\"18FB6138-2B3D-4C4B-8647-3D1646165641\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update_33:*:*:*:*:*:*\",\"matchCriteriaId\":\"49B3533A-57B1-4EDA-9434-D75AE837F2C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update45:*:*:*:*:*:*\",\"matchCriteriaId\":\"914D54AC-EAAE-4A01-BA88-7F245BDA47C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.6.0:update_95:*:*:*:*:*:*\",\"matchCriteriaId\":\"33DD9C2A-9C6E-407B-8110-2EC7906DE036\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update_75:*:*:*:*:*:*\",\"matchCriteriaId\":\"88FA3ACA-B2FC-4D9C-B67E-35272514FB84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update_80:*:*:*:*:*:*\",\"matchCriteriaId\":\"17B87292-EDBB-4D5A-8874-7405F040FAA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update_33:*:*:*:*:*:*\",\"matchCriteriaId\":\"366E2702-633C-4D4C-ACF8-4CBEC66719F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update_45:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CFE55B4-9A07-4E88-98AC-8345243AEF79\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1EB0F28-F23A-4969-8A3E-66DA2EFA40C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:11.0:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5BAC17C-EF31-4E94-9020-47B781AD94B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB2A1559-651C-46B0-B436-8E03DC8A60D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C649194-B8C2-49F7-A819-C635EE584ABF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"EB31BE7C-CB6D-447E-AFF8-618998950FC5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.10.3\",\"matchCriteriaId\":\"68566BD8-D5DD-4747-9C9A-59154400EBFA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:network_security_services:3.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6809678-475F-4703-BC9E-31EC8CAD3A24\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:sparc-opl_service_processor:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1121\",\"matchCriteriaId\":\"6AF02A45-1811-44F2-B3C9-90C11F5DF6DF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFDA34B4-65B4-41A5-AC22-667C8D8FF4B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39B565E1-C2F1-44FC-A517-E3130332B17C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C37BA825-679F-4257-9F2B-CE2318B75396\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97D4FFCF-5309-43B6-9FD5-680C6D535A7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4545786D-3129-4D92-B218-F4A92428ED48\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AADD23B-A8AF-4679-990D-C29A1D6EB5CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:39.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B692B58-6FB8-455F-86C0-35E0F216A736\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox_esr:31.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA389FFB-2289-4BFB-90A1-0E7EC42FFCEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:seamonkey:2.35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA79F816-D26E-4A0D-8CD8-994EBB42C822\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:31.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C87BCC3-0315-4B3C-BFCD-1E218B475251\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:38.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C00748D-ECFC-4ACA-964B-92330FE7B0EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mozilla:firefox_os:2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E50128DD-9997-49E6-A47E-6A0B7959B3AA\"}]}]}],\"references\":[{\"url\":\"http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10681\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143506486712441\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143557934009303\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143558092609708\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143628304012255\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143637549705650\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143655800220052\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144043644216842\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144050121701297\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144060576831314\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144060606031437\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144061542602287\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144069189622016\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144102017024820\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144104533800819\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=145409266329539\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://openwall.com/lists/oss-security/2015/05/20/8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1072.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1185.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1197.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1228.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1229.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1230.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1241.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1242.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1243.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1485.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1486.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1488.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1526.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1544.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1604.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-1624.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2056.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT204941\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT204942\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.citrix.com/article/CTX201114\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959111\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959195\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959325\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959453\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959481\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959517\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959530\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959539\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959636\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959812\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21960191\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21961717\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21962455\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21962739\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21958984\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21959132\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960041\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960194\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960380\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960418\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21962816\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21967893\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3287\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3300\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3316\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3324\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3339\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3688\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.fortiguard.com/advisory/2015-05-20-logjam-attack\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mozilla.org/security/announce/2015/mfsa2015-70.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74733\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/91787\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032474\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032475\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032476\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032637\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032645\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032647\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032648\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032649\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032650\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032651\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032652\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032653\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032654\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032655\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032656\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032688\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032699\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032702\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032727\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032759\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032777\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032778\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032783\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032784\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032856\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032864\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032865\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032871\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032884\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032910\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032932\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032960\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033019\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033064\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033065\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033067\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033208\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033209\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033210\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033222\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033341\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033385\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033416\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033430\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033433\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033513\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033760\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033891\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033991\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1034087\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1034728\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1034884\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1036218\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1040630\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2656-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2656-2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2673-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2696-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2706-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa98\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1138554\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10122\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://openssl.org/news/secadv/20150611.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://puppet.com/security/cve/CVE-2015-4000\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201506-02\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201512-10\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201603-11\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201701-46\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20150619-0001/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.citrix.com/article/CTX216642\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03831en_us\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://weakdh.org/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://weakdh.org/imperfect-forward-secrecy.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www-304.ibm.com/support/docview.wss?uid=swg21959745\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv_20150611.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.suse.com/security/cve/CVE-2015-4000.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10681\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143506486712441\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143557934009303\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143558092609708\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143628304012255\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143637549705650\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143655800220052\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144043644216842\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144050121701297\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144060576831314\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144060606031437\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144061542602287\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144069189622016\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144102017024820\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144104533800819\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=145409266329539\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://openwall.com/lists/oss-security/2015/05/20/8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1072.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1185.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1197.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1228.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1229.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1230.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1241.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1242.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1243.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1485.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1486.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1488.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1526.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1544.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1604.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-1624.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2056.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT204941\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.apple.com/kb/HT204942\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.citrix.com/article/CTX201114\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959111\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959195\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959325\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959453\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959481\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959517\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959530\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959539\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959636\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21959812\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21960191\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21961717\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21962455\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21962739\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21958984\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21959132\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960041\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960194\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960380\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21960418\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21962816\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www-304.ibm.com/support/docview.wss?uid=swg21967893\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3287\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3300\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3316\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3324\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3339\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3688\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.fortiguard.com/advisory/2015-05-20-logjam-attack\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mozilla.org/security/announce/2015/mfsa2015-70.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/74733\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securityfocus.com/bid/91787\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032474\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032475\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032476\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032637\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032645\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032647\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032648\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032649\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032650\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032651\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032652\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032653\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032654\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032655\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032656\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032688\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032699\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032702\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032727\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032759\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032777\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032778\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032783\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032784\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032856\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032864\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032865\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032871\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032884\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032910\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032932\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032960\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033019\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033064\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033065\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033067\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033208\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033209\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033210\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033222\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033341\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033385\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033416\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033430\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033433\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033513\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033760\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033891\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1033991\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1034087\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1034728\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1034884\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1036218\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1040630\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2656-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2656-2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2673-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2696-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-2706-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa98\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1138554\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10122\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://openssl.org/news/secadv/20150611.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://puppet.com/security/cve/CVE-2015-4000\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201506-02\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201512-10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201603-11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201701-46\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20150619-0001/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.citrix.com/article/CTX216642\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03831en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://weakdh.org/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://weakdh.org/imperfect-forward-secrecy.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www-304.ibm.com/support/docview.wss?uid=swg21959745\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv_20150611.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.suse.com/security/cve/CVE-2015-4000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html\", \"name\": \"SUSE-SU-2015:1184\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html\", \"name\": \"SUSE-SU-2015:1177\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2\", \"name\": \"SSRT102180\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1243.html\", \"name\": \"RHSA-2015:1243\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html\", \"name\": \"openSUSE-SU-2015:1229\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033208\", \"name\": \"1033208\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032637\", \"name\": \"1032637\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144050121701297\u0026w=2\", \"name\": \"HPSBGN03404\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.debian.org/security/2016/dsa-3688\", \"name\": \"DSA-3688\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3287\", \"name\": \"DSA-3287\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"name\": \"HPSBUX03512\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032865\", \"name\": \"1032865\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143557934009303\u0026w=2\", \"name\": \"HPSBGN03351\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html\", \"name\": \"SUSE-SU-2015:1268\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html\", \"name\": \"SUSE-SU-2015:1150\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1034728\", \"name\": \"1034728\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html\", \"name\": \"SUSE-SU-2015:1183\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032656\", \"name\": \"1032656\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2056.html\", \"name\": \"RHSA-2016:2056\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://openwall.com/lists/oss-security/2015/05/20/8\", \"name\": \"[oss-security] 20150520 CVE-2015-4000 - TLS does not properly convey server\u0027s ciphersuite choice\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html\", \"name\": \"openSUSE-SU-2015:1684\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143628304012255\u0026w=2\", \"name\": \"HPSBGN03361\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144060576831314\u0026w=2\", \"name\": \"HPSBGN03399\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032475\", \"name\": \"1032475\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032960\", \"name\": \"1032960\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html\", \"name\": \"openSUSE-SU-2016:0255\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032653\", \"name\": \"1032653\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html\", \"name\": \"SUSE-SU-2016:0224\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033385\", \"name\": \"1033385\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/201512-10\", \"name\": \"GLSA-201512-10\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1229.html\", \"name\": \"RHSA-2015:1229\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html\", \"name\": \"openSUSE-SU-2016:0483\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032864\", \"name\": \"1032864\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032910\", \"name\": \"1032910\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032645\", \"name\": \"1032645\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2706-1\", \"name\": \"USN-2706-1\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/201701-46\", \"name\": \"GLSA-201701-46\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1526.html\", \"name\": \"RHSA-2015:1526\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033760\", \"name\": \"1033760\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1485.html\", \"name\": \"RHSA-2015:1485\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1197.html\", \"name\": \"RHSA-2015:1197\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144104533800819\u0026w=2\", \"name\": \"HPSBMU03401\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032699\", \"name\": \"1032699\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032476\", \"name\": \"1032476\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032649\", \"name\": \"1032649\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144043644216842\u0026w=2\", \"name\": \"HPSBMU03345\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143637549705650\u0026w=2\", \"name\": \"HPSBUX03363\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1544.html\", \"name\": \"RHSA-2015:1544\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html\", \"name\": \"FEDORA-2015-9130\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html\", \"name\": \"SUSE-SU-2015:1182\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196\", \"name\": \"SSRT102112\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032688\", \"name\": \"1032688\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html\", \"name\": \"SUSE-SU-2015:1143\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032652\", \"name\": \"1032652\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html\", \"name\": \"FEDORA-2015-9048\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1185.html\", \"name\": \"RHSA-2015:1185\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143558092609708\u0026w=2\", \"name\": \"HPSBGN03362\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html\", \"name\": \"APPLE-SA-2015-06-30-2\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html\", \"name\": \"openSUSE-SU-2015:1289\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html\", \"name\": \"FEDORA-2015-9161\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144069189622016\u0026w=2\", \"name\": \"HPSBGN03402\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032648\", \"name\": \"1032648\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032759\", \"name\": \"1032759\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1228.html\", \"name\": \"RHSA-2015:1228\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144060606031437\u0026w=2\", \"name\": \"HPSBGN03405\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3316\", \"name\": \"DSA-3316\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033209\", \"name\": \"1033209\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032871\", \"name\": \"1032871\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3324\", \"name\": \"DSA-3324\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032655\", \"name\": \"1032655\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033210\", \"name\": \"1033210\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144061542602287\u0026w=2\", \"name\": \"HPSBGN03411\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html\", \"name\": \"openSUSE-SU-2015:1277\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=145409266329539\u0026w=2\", \"name\": \"HPSBGN03533\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2673-1\", \"name\": \"USN-2673-1\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1034884\", \"name\": \"1034884\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143506486712441\u0026w=2\", \"name\": \"HPSBMU03356\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/201603-11\", \"name\": \"GLSA-201603-11\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033064\", \"name\": \"1033064\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html\", \"name\": \"SUSE-SU-2015:1181\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032778\", \"name\": \"1032778\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032474\", \"name\": \"1032474\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"name\": \"SSRT102254\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144102017024820\u0026w=2\", \"name\": \"HPSBGN03407\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html\", \"name\": \"openSUSE-SU-2015:1209\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032784\", \"name\": \"1032784\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032777\", \"name\": \"1032777\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033416\", \"name\": \"1033416\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033991\", \"name\": \"1033991\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032647\", \"name\": \"1032647\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032654\", \"name\": \"1032654\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033341\", \"name\": \"1033341\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1486.html\", \"name\": \"RHSA-2015:1486\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html\", \"name\": \"SUSE-SU-2015:1663\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033433\", \"name\": \"1033433\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2696-1\", \"name\": \"USN-2696-1\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\", \"name\": \"APPLE-SA-2015-06-30-1\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032702\", \"name\": \"1032702\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3339\", \"name\": \"DSA-3339\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032727\", \"name\": \"1032727\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1242.html\", \"name\": \"RHSA-2015:1242\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html\", \"name\": \"SUSE-SU-2015:1269\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/201506-02\", \"name\": \"GLSA-201506-02\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/91787\", \"name\": \"91787\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-1624.html\", \"name\": \"RHSA-2016:1624\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html\", \"name\": \"openSUSE-SU-2015:1266\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1488.html\", \"name\": \"RHSA-2015:1488\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html\", \"name\": \"SUSE-SU-2015:1319\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html\", \"name\": \"SUSE-SU-2015:1320\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033430\", \"name\": \"1033430\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html\", \"name\": \"openSUSE-SU-2015:1288\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1241.html\", \"name\": \"RHSA-2015:1241\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html\", \"name\": \"openSUSE-SU-2016:0478\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html\", \"name\": \"SUSE-SU-2015:1581\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2\", \"name\": \"HPSBUX03388\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1230.html\", \"name\": \"RHSA-2015:1230\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/74733\", \"name\": \"74733\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html\", \"name\": \"openSUSE-SU-2016:0261\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032651\", \"name\": \"1032651\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033065\", \"name\": \"1033065\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2656-1\", \"name\": \"USN-2656-1\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html\", \"name\": \"SUSE-SU-2015:1185\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033222\", \"name\": \"1033222\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1036218\", \"name\": \"1036218\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html\", \"name\": \"SUSE-SU-2015:1449\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143655800220052\u0026w=2\", \"name\": \"HPSBGN03373\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1040630\", \"name\": \"1040630\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html\", \"name\": \"openSUSE-SU-2015:1139\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1034087\", \"name\": \"1034087\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033513\", \"name\": \"1033513\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032884\", \"name\": \"1032884\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1604.html\", \"name\": \"RHSA-2015:1604\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html\", \"name\": \"SUSE-SU-2016:0262\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032932\", \"name\": \"1032932\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033891\", \"name\": \"1033891\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html\", \"name\": \"openSUSE-SU-2016:0226\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032783\", \"name\": \"1032783\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032856\", \"name\": \"1032856\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc\", \"name\": \"NetBSD-SA2015-008\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3300\", \"name\": \"DSA-3300\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2656-2\", \"name\": \"USN-2656-2\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033067\", \"name\": \"1033067\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1033019\", \"name\": \"1033019\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1072.html\", \"name\": \"RHSA-2015:1072\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1032650\", \"name\": \"1032650\", \"tags\": [\"vdb-entry\", \"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2021.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10681\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21962739\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10122\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://support.apple.com/kb/HT204941\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21962816\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959812\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www-304.ibm.com/support/docview.wss?uid=swg21959745\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://weakdh.org/imperfect-forward-secrecy.pdf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21959132\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959539\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959325\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://openssl.org/news/secadv/20150611.txt\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03831en_us\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21967893\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21958984\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959517\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959195\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21961717\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960041\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960194\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959453\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20150619-0001/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959111\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960418\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.suse.com/security/cve/CVE-2015-4000.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://support.citrix.com/article/CTX201114\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960380\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://support.apple.com/kb/HT204942\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959530\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21960191\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959636\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://puppet.com/security/cve/CVE-2015-4000\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.mozilla.org/security/announce/2015/mfsa2015-70.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.citrix.com/article/CTX216642\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://weakdh.org/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959481\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bto.bluecoat.com/security-advisory/sa98\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1138554\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21962455\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.openssl.org/news/secadv_20150611.txt\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.fortiguard.com/advisory/2015-05-20-logjam-attack\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-06T06:04:02.725Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 3.7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2015-4000\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-27T16:22:15.524106Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-295\", \"description\": \"CWE-295 Improper Certificate Validation\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-27T16:22:10.167Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2015-05-19T00:00:00.000Z\", \"references\": [{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html\", \"name\": \"SUSE-SU-2015:1184\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html\", \"name\": \"SUSE-SU-2015:1177\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2\", \"name\": \"SSRT102180\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1243.html\", \"name\": \"RHSA-2015:1243\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html\", \"name\": \"openSUSE-SU-2015:1229\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033208\", \"name\": \"1033208\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032637\", \"name\": \"1032637\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144050121701297\u0026w=2\", \"name\": \"HPSBGN03404\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.debian.org/security/2016/dsa-3688\", \"name\": \"DSA-3688\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3287\", \"name\": \"DSA-3287\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"name\": \"HPSBUX03512\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032865\", \"name\": \"1032865\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143557934009303\u0026w=2\", \"name\": \"HPSBGN03351\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html\", \"name\": \"SUSE-SU-2015:1268\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html\", \"name\": \"SUSE-SU-2015:1150\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1034728\", \"name\": \"1034728\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html\", \"name\": \"SUSE-SU-2015:1183\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032656\", \"name\": \"1032656\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2056.html\", \"name\": \"RHSA-2016:2056\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://openwall.com/lists/oss-security/2015/05/20/8\", \"name\": \"[oss-security] 20150520 CVE-2015-4000 - TLS does not properly convey server\u0027s ciphersuite choice\", \"tags\": [\"mailing-list\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html\", \"name\": \"openSUSE-SU-2015:1684\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143628304012255\u0026w=2\", \"name\": \"HPSBGN03361\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144060576831314\u0026w=2\", \"name\": \"HPSBGN03399\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032475\", \"name\": \"1032475\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032960\", \"name\": \"1032960\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html\", \"name\": \"openSUSE-SU-2016:0255\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032653\", \"name\": \"1032653\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html\", \"name\": \"SUSE-SU-2016:0224\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033385\", \"name\": \"1033385\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"https://security.gentoo.org/glsa/201512-10\", \"name\": \"GLSA-201512-10\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1229.html\", \"name\": \"RHSA-2015:1229\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html\", \"name\": \"openSUSE-SU-2016:0483\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032864\", \"name\": \"1032864\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032910\", \"name\": \"1032910\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032645\", \"name\": \"1032645\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2706-1\", \"name\": \"USN-2706-1\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201701-46\", \"name\": \"GLSA-201701-46\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1526.html\", \"name\": \"RHSA-2015:1526\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033760\", \"name\": \"1033760\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1485.html\", \"name\": \"RHSA-2015:1485\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1197.html\", \"name\": \"RHSA-2015:1197\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144104533800819\u0026w=2\", \"name\": \"HPSBMU03401\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032699\", \"name\": \"1032699\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032476\", \"name\": \"1032476\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032649\", \"name\": \"1032649\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144043644216842\u0026w=2\", \"name\": \"HPSBMU03345\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143637549705650\u0026w=2\", \"name\": \"HPSBUX03363\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1544.html\", \"name\": \"RHSA-2015:1544\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html\", \"name\": \"FEDORA-2015-9130\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html\", \"name\": \"SUSE-SU-2015:1182\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196\", \"name\": \"SSRT102112\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032688\", \"name\": \"1032688\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html\", \"name\": \"SUSE-SU-2015:1143\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032652\", \"name\": \"1032652\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html\", \"name\": \"FEDORA-2015-9048\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1185.html\", \"name\": \"RHSA-2015:1185\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143558092609708\u0026w=2\", \"name\": \"HPSBGN03362\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html\", \"name\": \"APPLE-SA-2015-06-30-2\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html\", \"name\": \"openSUSE-SU-2015:1289\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html\", \"name\": \"FEDORA-2015-9161\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144069189622016\u0026w=2\", \"name\": \"HPSBGN03402\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032648\", \"name\": \"1032648\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032759\", \"name\": \"1032759\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1228.html\", \"name\": \"RHSA-2015:1228\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144060606031437\u0026w=2\", \"name\": \"HPSBGN03405\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3316\", \"name\": \"DSA-3316\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033209\", \"name\": \"1033209\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032871\", \"name\": \"1032871\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3324\", \"name\": \"DSA-3324\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032655\", \"name\": \"1032655\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033210\", \"name\": \"1033210\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144061542602287\u0026w=2\", \"name\": \"HPSBGN03411\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html\", \"name\": \"openSUSE-SU-2015:1277\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=145409266329539\u0026w=2\", \"name\": \"HPSBGN03533\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2673-1\", \"name\": \"USN-2673-1\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1034884\", \"name\": \"1034884\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143506486712441\u0026w=2\", \"name\": \"HPSBMU03356\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201603-11\", \"name\": \"GLSA-201603-11\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033064\", \"name\": \"1033064\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html\", \"name\": \"SUSE-SU-2015:1181\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032778\", \"name\": \"1032778\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032474\", \"name\": \"1032474\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144493176821532\u0026w=2\", \"name\": \"SSRT102254\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=144102017024820\u0026w=2\", \"name\": \"HPSBGN03407\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html\", \"name\": \"openSUSE-SU-2015:1209\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032784\", \"name\": \"1032784\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032777\", \"name\": \"1032777\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033416\", \"name\": \"1033416\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033991\", \"name\": \"1033991\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032647\", \"name\": \"1032647\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032654\", \"name\": \"1032654\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033341\", \"name\": \"1033341\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1486.html\", \"name\": \"RHSA-2015:1486\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html\", \"name\": \"SUSE-SU-2015:1663\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033433\", \"name\": \"1033433\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2696-1\", \"name\": \"USN-2696-1\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html\", \"name\": \"APPLE-SA-2015-06-30-1\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032702\", \"name\": \"1032702\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3339\", \"name\": \"DSA-3339\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032727\", \"name\": \"1032727\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1242.html\", \"name\": \"RHSA-2015:1242\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html\", \"name\": \"SUSE-SU-2015:1269\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/201506-02\", \"name\": \"GLSA-201506-02\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/91787\", \"name\": \"91787\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-1624.html\", \"name\": \"RHSA-2016:1624\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html\", \"name\": \"openSUSE-SU-2015:1266\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1488.html\", \"name\": \"RHSA-2015:1488\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html\", \"name\": \"SUSE-SU-2015:1319\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html\", \"name\": \"SUSE-SU-2015:1320\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033430\", \"name\": \"1033430\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html\", \"name\": \"openSUSE-SU-2015:1288\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1241.html\", \"name\": \"RHSA-2015:1241\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html\", \"name\": \"openSUSE-SU-2016:0478\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html\", \"name\": \"SUSE-SU-2015:1581\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2\", \"name\": \"HPSBUX03388\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1230.html\", \"name\": \"RHSA-2015:1230\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/74733\", \"name\": \"74733\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html\", \"name\": \"openSUSE-SU-2016:0261\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032651\", \"name\": \"1032651\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033065\", \"name\": \"1033065\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2656-1\", \"name\": \"USN-2656-1\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html\", \"name\": \"SUSE-SU-2015:1185\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033222\", \"name\": \"1033222\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1036218\", \"name\": \"1036218\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html\", \"name\": \"SUSE-SU-2015:1449\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=143655800220052\u0026w=2\", \"name\": \"HPSBGN03373\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1040630\", \"name\": \"1040630\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html\", \"name\": \"openSUSE-SU-2015:1139\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1034087\", \"name\": \"1034087\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033513\", \"name\": \"1033513\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032884\", \"name\": \"1032884\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1604.html\", \"name\": \"RHSA-2015:1604\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html\", \"name\": \"SUSE-SU-2016:0262\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032932\", \"name\": \"1032932\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033891\", \"name\": \"1033891\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html\", \"name\": \"openSUSE-SU-2016:0226\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032783\", \"name\": \"1032783\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032856\", \"name\": \"1032856\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc\", \"name\": \"NetBSD-SA2015-008\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.debian.org/security/2015/dsa-3300\", \"name\": \"DSA-3300\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-2656-2\", \"name\": \"USN-2656-2\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1033067\", \"name\": \"1033067\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1033019\", \"name\": \"1033019\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2015-1072.html\", \"name\": \"RHSA-2015:1072\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"http://www.securitytracker.com/id/1032650\", \"name\": \"1032650\", \"tags\": [\"vdb-entry\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2021.html\"}, {\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10681\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21962739\"}, {\"url\": \"https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html\"}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10122\"}, {\"url\": \"http://support.apple.com/kb/HT204941\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21962816\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959812\"}, {\"url\": \"https://www-304.ibm.com/support/docview.wss?uid=swg21959745\"}, {\"url\": \"https://weakdh.org/imperfect-forward-secrecy.pdf\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21959132\"}, {\"url\": \"https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959539\"}, {\"url\": \"https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959325\"}, {\"url\": \"https://openssl.org/news/secadv/20150611.txt\"}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html\"}, {\"url\": \"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03831en_us\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21967893\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21958984\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959517\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959195\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21961717\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960041\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960194\"}, {\"url\": \"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959453\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20150619-0001/\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959111\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960418\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246\"}, {\"url\": \"https://www.suse.com/security/cve/CVE-2015-4000.html\"}, {\"url\": \"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes\"}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655\"}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722\"}, {\"url\": \"http://support.citrix.com/article/CTX201114\"}, {\"url\": \"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery\"}, {\"url\": \"http://www-304.ibm.com/support/docview.wss?uid=swg21960380\"}, {\"url\": \"http://support.apple.com/kb/HT204942\"}, {\"url\": \"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402\"}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083\"}, {\"url\": \"http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc\"}, {\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959530\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21960191\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959636\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140\"}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763\"}, {\"url\": \"https://puppet.com/security/cve/CVE-2015-4000\"}, {\"url\": \"http://www.mozilla.org/security/announce/2015/mfsa2015-70.html\"}, {\"url\": \"http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789\"}, {\"url\": \"https://support.citrix.com/article/CTX216642\"}, {\"url\": \"https://weakdh.org/\"}, {\"url\": \"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21959481\"}, {\"url\": \"https://bto.bluecoat.com/security-advisory/sa98\"}, {\"url\": \"https://bugzilla.mozilla.org/show_bug.cgi?id=1138554\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21962455\"}, {\"url\": \"https://www.openssl.org/news/secadv_20150611.txt\"}, {\"url\": \"http://www.fortiguard.com/advisory/2015-05-20-logjam-attack\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \\\"Logjam\\\" issue.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2022-12-13T00:00:00.000Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2015-4000\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-27T16:22:20.395Z\", \"dateReserved\": \"2015-05-15T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2015-05-21T00:00:00.000Z\", \"assignerShortName\": \"mitre\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
SUSE-SU-2015:1544-1
Vulnerability from csaf_suse - Published: 2015-09-09 08:52 - Updated: 2015-09-09 08:52Summary
Security update for openssh
Severity
Moderate
Notes
Title of the patch: Security update for openssh
Description of the patch:
openssh was updated to fix several security issues.
These security issues were fixed:
* CVE-2015-5352: The x11_open_helper function in channels.c in ssh
in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of
the refusal deadline for X connections, which made it easier for remote
attackers to bypass intended access restrictions via a connection outside
of the permitted time window (bsc#936695).
* CVE-2015-5600: The kbdint_next_device function in auth2-chall.c
in sshd in OpenSSH did not properly restrict the processing of
keyboard-interactive devices within a single connection, which made it
easier for remote attackers to conduct brute-force attacks or cause a
denial of service (CPU consumption) via a long and duplicative list in
the ssh -oKbdInteractiveDevices option, as demonstrated by a modified
client that provides a different password for each pam element on this
list (bsc#938746).
* CVE-2015-4000: Removed and disabled weak DH groups to address LOGJAM (bsc#932483).
* Hardening patch to fix sftp RCE (bsc#903649).
* CVE-2015-6563: The monitor component in sshd in OpenSSH accepted
extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which
allowed local users to conduct impersonation attacks by leveraging any SSH
login access in conjunction with control of the sshd uid to send a crafted
MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. (bsc#943010)
* CVE-2015-6564: Use-after-free vulnerability in the
mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH might
have allowed local users to gain privileges by leveraging control of the
sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request. (bsc#943006)
Also use %restart_on_update in the trigger script.
Patchnames: SUSE-SLE-DESKTOP-12-2015-526,SUSE-SLE-SERVER-12-2015-526
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
27 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
82 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nopenssh was updated to fix several security issues.\n\nThese security issues were fixed:\n* CVE-2015-5352: The x11_open_helper function in channels.c in ssh\n in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of\n the refusal deadline for X connections, which made it easier for remote\n attackers to bypass intended access restrictions via a connection outside\n of the permitted time window (bsc#936695).\n* CVE-2015-5600: The kbdint_next_device function in auth2-chall.c\n in sshd in OpenSSH did not properly restrict the processing of\n keyboard-interactive devices within a single connection, which made it\n easier for remote attackers to conduct brute-force attacks or cause a\n denial of service (CPU consumption) via a long and duplicative list in\n the ssh -oKbdInteractiveDevices option, as demonstrated by a modified\n client that provides a different password for each pam element on this\n list (bsc#938746).\n* CVE-2015-4000: Removed and disabled weak DH groups to address LOGJAM (bsc#932483).\n* Hardening patch to fix sftp RCE (bsc#903649).\n* CVE-2015-6563: The monitor component in sshd in OpenSSH accepted\n extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which\n allowed local users to conduct impersonation attacks by leveraging any SSH\n login access in conjunction with control of the sshd uid to send a crafted\n MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. (bsc#943010)\n* CVE-2015-6564: Use-after-free vulnerability in the\n mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH might\n have allowed local users to gain privileges by leveraging control of the\n sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request. (bsc#943006)\n\nAlso use %restart_on_update in the trigger script.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2015-526,SUSE-SLE-SERVER-12-2015-526",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1544-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1544-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151544-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1544-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-September/001589.html"
},
{
"category": "self",
"summary": "SUSE Bug 903649",
"url": "https://bugzilla.suse.com/903649"
},
{
"category": "self",
"summary": "SUSE Bug 932483",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "self",
"summary": "SUSE Bug 936695",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "self",
"summary": "SUSE Bug 938746",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "self",
"summary": "SUSE Bug 943006",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "self",
"summary": "SUSE Bug 943010",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5352 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5600 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6563 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6564 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6564/"
}
],
"title": "Security update for openssh",
"tracking": {
"current_release_date": "2015-09-09T08:52:05Z",
"generator": {
"date": "2015-09-09T08:52:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1544-1",
"initial_release_date": "2015-09-09T08:52:05Z",
"revision_history": [
{
"date": "2015-09-09T08:52:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-29.1.ppc64le",
"product": {
"name": "openssh-6.6p1-29.1.ppc64le",
"product_id": "openssh-6.6p1-29.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"product": {
"name": "openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"product_id": "openssh-askpass-gnome-6.6p1-29.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-29.1.ppc64le",
"product": {
"name": "openssh-fips-6.6p1-29.1.ppc64le",
"product_id": "openssh-fips-6.6p1-29.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-29.1.ppc64le",
"product": {
"name": "openssh-helpers-6.6p1-29.1.ppc64le",
"product_id": "openssh-helpers-6.6p1-29.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-29.1.s390x",
"product": {
"name": "openssh-6.6p1-29.1.s390x",
"product_id": "openssh-6.6p1-29.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-29.1.s390x",
"product": {
"name": "openssh-askpass-gnome-6.6p1-29.1.s390x",
"product_id": "openssh-askpass-gnome-6.6p1-29.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-29.1.s390x",
"product": {
"name": "openssh-fips-6.6p1-29.1.s390x",
"product_id": "openssh-fips-6.6p1-29.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-29.1.s390x",
"product": {
"name": "openssh-helpers-6.6p1-29.1.s390x",
"product_id": "openssh-helpers-6.6p1-29.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-29.1.x86_64",
"product": {
"name": "openssh-6.6p1-29.1.x86_64",
"product_id": "openssh-6.6p1-29.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-29.1.x86_64",
"product": {
"name": "openssh-askpass-gnome-6.6p1-29.1.x86_64",
"product_id": "openssh-askpass-gnome-6.6p1-29.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-29.1.x86_64",
"product": {
"name": "openssh-helpers-6.6p1-29.1.x86_64",
"product_id": "openssh-helpers-6.6p1-29.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-29.1.x86_64",
"product": {
"name": "openssh-fips-6.6p1-29.1.x86_64",
"product_id": "openssh-fips-6.6p1-29.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-helpers-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x"
},
"product_reference": "openssh-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x"
},
"product_reference": "openssh-askpass-gnome-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-fips-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x"
},
"product_reference": "openssh-fips-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-fips-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-helpers-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x"
},
"product_reference": "openssh-helpers-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-helpers-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x"
},
"product_reference": "openssh-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x"
},
"product_reference": "openssh-askpass-gnome-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-fips-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x"
},
"product_reference": "openssh-fips-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-fips-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le"
},
"product_reference": "openssh-helpers-6.6p1-29.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-29.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x"
},
"product_reference": "openssh-helpers-6.6p1-29.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
},
"product_reference": "openssh-helpers-6.6p1-29.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T08:52:05Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-5352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5352"
}
],
"notes": [
{
"category": "general",
"text": "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5352",
"url": "https://www.suse.com/security/cve/CVE-2015-5352"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 936695 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "external",
"summary": "SUSE Bug 938277 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/938277"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/992991"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T08:52:05Z",
"details": "moderate"
}
],
"title": "CVE-2015-5352"
},
{
"cve": "CVE-2015-5600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5600"
}
],
"notes": [
{
"category": "general",
"text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5600",
"url": "https://www.suse.com/security/cve/CVE-2015-5600"
},
{
"category": "external",
"summary": "SUSE Bug 1009988 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1009988"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 938746 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 943504 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943504"
},
{
"category": "external",
"summary": "SUSE Bug 945985 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/945985"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 954457 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/954457"
},
{
"category": "external",
"summary": "SUSE Bug 957883 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/957883"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T08:52:05Z",
"details": "important"
}
],
"title": "CVE-2015-5600"
},
{
"cve": "CVE-2015-6563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6563"
}
],
"notes": [
{
"category": "general",
"text": "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6563",
"url": "https://www.suse.com/security/cve/CVE-2015-6563"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T08:52:05Z",
"details": "moderate"
}
],
"title": "CVE-2015-6563"
},
{
"cve": "CVE-2015-6564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6564"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6564",
"url": "https://www.suse.com/security/cve/CVE-2015-6564"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 942850 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/942850"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server 12:openssh-helpers-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-askpass-gnome-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-fips-6.6p1-29.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openssh-helpers-6.6p1-29.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-09T08:52:05Z",
"details": "moderate"
}
],
"title": "CVE-2015-6564"
}
]
}
SUSE-SU-2015:1581-1
Vulnerability from csaf_suse - Published: 2015-09-17 12:53 - Updated: 2015-09-17 12:53Summary
Security update for openssh
Severity
Important
Notes
Title of the patch: Security update for openssh
Description of the patch: openssh was updated to fix several security issues and bugs.
These security issues were fixed:
* CVE-2015-5352: The x11_open_helper function in channels.c in ssh
in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of
the refusal deadline for X connections, which made it easier for remote
attackers to bypass intended access restrictions via a connection outside
of the permitted time window (bsc#936695).
* CVE-2015-5600: The kbdint_next_device function in auth2-chall.c
in sshd in OpenSSH did not properly restrict the processing of
keyboard-interactive devices within a single connection, which made it
easier for remote attackers to conduct brute-force attacks or cause a
denial of service (CPU consumption) via a long and duplicative list in
the ssh -oKbdInteractiveDevices option, as demonstrated by a modified
client that provides a different password for each pam element on this
list (bsc#938746).
* CVE-2015-4000: Removed and disabled weak DH groups to address LOGJAM (bsc#932483).
* Hardening patch to fix sftp RCE (bsc#903649).
* CVE-2015-6563: The monitor component in sshd in OpenSSH accepted
extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which
allowed local users to conduct impersonation attacks by leveraging any SSH
login access in conjunction with control of the sshd uid to send a crafted
MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
* CVE-2015-6564: Use-after-free vulnerability in the
mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH might
have allowed local users to gain privileges by leveraging control of the
sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.
These non-security issues were fixed:
- bsc#914309: sshd inherits oom_adj -17 on SIGHUP causing DoS potential for oom_killer.
- bsc#673532: limits.conf fsize change in SLES10SP3 causing problems to WebSphere mqm user.
- bsc#916549: Fixed support for aesXXX-gcm@openssh.com.
Patchnames: sledsp3-openssh-12096,slessp3-openssh-12096
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
87 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "openssh was updated to fix several security issues and bugs.\n\nThese security issues were fixed:\n* CVE-2015-5352: The x11_open_helper function in channels.c in ssh\n in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of\n the refusal deadline for X connections, which made it easier for remote\n attackers to bypass intended access restrictions via a connection outside\n of the permitted time window (bsc#936695).\n* CVE-2015-5600: The kbdint_next_device function in auth2-chall.c\n in sshd in OpenSSH did not properly restrict the processing of\n keyboard-interactive devices within a single connection, which made it\n easier for remote attackers to conduct brute-force attacks or cause a\n denial of service (CPU consumption) via a long and duplicative list in\n the ssh -oKbdInteractiveDevices option, as demonstrated by a modified\n client that provides a different password for each pam element on this\n list (bsc#938746).\n* CVE-2015-4000: Removed and disabled weak DH groups to address LOGJAM (bsc#932483).\n* Hardening patch to fix sftp RCE (bsc#903649).\n* CVE-2015-6563: The monitor component in sshd in OpenSSH accepted\n extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which\n allowed local users to conduct impersonation attacks by leveraging any SSH\n login access in conjunction with control of the sshd uid to send a crafted\n MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.\n* CVE-2015-6564: Use-after-free vulnerability in the\n mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH might\n have allowed local users to gain privileges by leveraging control of the\n sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.\n\nThese non-security issues were fixed:\n- bsc#914309: sshd inherits oom_adj -17 on SIGHUP causing DoS potential for oom_killer.\n- bsc#673532: limits.conf fsize change in SLES10SP3 causing problems to WebSphere mqm user.\n- bsc#916549: Fixed support for aesXXX-gcm@openssh.com.\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sledsp3-openssh-12096,slessp3-openssh-12096",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1581-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1581-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151581-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1581-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-September/001595.html"
},
{
"category": "self",
"summary": "SUSE Bug 673532",
"url": "https://bugzilla.suse.com/673532"
},
{
"category": "self",
"summary": "SUSE Bug 903649",
"url": "https://bugzilla.suse.com/903649"
},
{
"category": "self",
"summary": "SUSE Bug 905118",
"url": "https://bugzilla.suse.com/905118"
},
{
"category": "self",
"summary": "SUSE Bug 914309",
"url": "https://bugzilla.suse.com/914309"
},
{
"category": "self",
"summary": "SUSE Bug 916549",
"url": "https://bugzilla.suse.com/916549"
},
{
"category": "self",
"summary": "SUSE Bug 932483",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "self",
"summary": "SUSE Bug 936695",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "self",
"summary": "SUSE Bug 938746",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "self",
"summary": "SUSE Bug 943006",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "self",
"summary": "SUSE Bug 943010",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "self",
"summary": "SUSE Bug 945493",
"url": "https://bugzilla.suse.com/945493"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5352 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5600 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6563 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6564 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6564/"
}
],
"title": "Security update for openssh",
"tracking": {
"current_release_date": "2015-09-17T12:53:08Z",
"generator": {
"date": "2015-09-17T12:53:08Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1581-1",
"initial_release_date": "2015-09-17T12:53:08Z",
"revision_history": [
{
"date": "2015-09-17T12:53:08Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.2p2-0.21.1.i586",
"product": {
"name": "openssh-6.2p2-0.21.1.i586",
"product_id": "openssh-6.2p2-0.21.1.i586"
}
},
{
"category": "product_version",
"name": "openssh-askpass-6.2p2-0.21.1.i586",
"product": {
"name": "openssh-askpass-6.2p2-0.21.1.i586",
"product_id": "openssh-askpass-6.2p2-0.21.1.i586"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.2p2-0.21.3.i586",
"product": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.i586",
"product_id": "openssh-askpass-gnome-6.2p2-0.21.3.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.2p2-0.21.1.ia64",
"product": {
"name": "openssh-6.2p2-0.21.1.ia64",
"product_id": "openssh-6.2p2-0.21.1.ia64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-6.2p2-0.21.1.ia64",
"product": {
"name": "openssh-askpass-6.2p2-0.21.1.ia64",
"product_id": "openssh-askpass-6.2p2-0.21.1.ia64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"product": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"product_id": "openssh-askpass-gnome-6.2p2-0.21.3.ia64"
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.2p2-0.21.1.ppc64",
"product": {
"name": "openssh-6.2p2-0.21.1.ppc64",
"product_id": "openssh-6.2p2-0.21.1.ppc64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-6.2p2-0.21.1.ppc64",
"product": {
"name": "openssh-askpass-6.2p2-0.21.1.ppc64",
"product_id": "openssh-askpass-6.2p2-0.21.1.ppc64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"product": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"product_id": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.2p2-0.21.1.s390x",
"product": {
"name": "openssh-6.2p2-0.21.1.s390x",
"product_id": "openssh-6.2p2-0.21.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-askpass-6.2p2-0.21.1.s390x",
"product": {
"name": "openssh-askpass-6.2p2-0.21.1.s390x",
"product_id": "openssh-askpass-6.2p2-0.21.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"product": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"product_id": "openssh-askpass-gnome-6.2p2-0.21.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.2p2-0.21.1.x86_64",
"product": {
"name": "openssh-6.2p2-0.21.1.x86_64",
"product_id": "openssh-6.2p2-0.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-6.2p2-0.21.1.x86_64",
"product": {
"name": "openssh-askpass-6.2p2-0.21.1.x86_64",
"product_id": "openssh-askpass-6.2p2-0.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"product": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"product_id": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sled:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.i586 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP3",
"product_id": "SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64"
},
"product_reference": "openssh-6.2p2-0.21.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64"
},
"product_reference": "openssh-6.2p2-0.21.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x"
},
"product_reference": "openssh-6.2p2-0.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.i586 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ia64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.s390x as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP3",
"product_id": "SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64"
},
"product_reference": "openssh-6.2p2-0.21.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64"
},
"product_reference": "openssh-6.2p2-0.21.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x"
},
"product_reference": "openssh-6.2p2-0.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ia64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64"
},
"product_reference": "openssh-6.2p2-0.21.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64"
},
"product_reference": "openssh-6.2p2-0.21.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x"
},
"product_reference": "openssh-6.2p2-0.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-6.2p2-0.21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64"
},
"product_reference": "openssh-askpass-6.2p2-0.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-17T12:53:08Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-5352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5352"
}
],
"notes": [
{
"category": "general",
"text": "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5352",
"url": "https://www.suse.com/security/cve/CVE-2015-5352"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 936695 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "external",
"summary": "SUSE Bug 938277 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/938277"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/992991"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-17T12:53:08Z",
"details": "moderate"
}
],
"title": "CVE-2015-5352"
},
{
"cve": "CVE-2015-5600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5600"
}
],
"notes": [
{
"category": "general",
"text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5600",
"url": "https://www.suse.com/security/cve/CVE-2015-5600"
},
{
"category": "external",
"summary": "SUSE Bug 1009988 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1009988"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 938746 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 943504 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943504"
},
{
"category": "external",
"summary": "SUSE Bug 945985 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/945985"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 954457 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/954457"
},
{
"category": "external",
"summary": "SUSE Bug 957883 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/957883"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-17T12:53:08Z",
"details": "important"
}
],
"title": "CVE-2015-5600"
},
{
"cve": "CVE-2015-6563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6563"
}
],
"notes": [
{
"category": "general",
"text": "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6563",
"url": "https://www.suse.com/security/cve/CVE-2015-6563"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-17T12:53:08Z",
"details": "moderate"
}
],
"title": "CVE-2015-6563"
},
{
"cve": "CVE-2015-6564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6564"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6564",
"url": "https://www.suse.com/security/cve/CVE-2015-6564"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 942850 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/942850"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Desktop 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-6.2p2-0.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP3:openssh-askpass-gnome-6.2p2-0.21.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-09-17T12:53:08Z",
"details": "moderate"
}
],
"title": "CVE-2015-6564"
}
]
}
SUSE-SU-2015:1663-1
Vulnerability from csaf_suse - Published: 2015-07-08 15:49 - Updated: 2015-07-08 15:49Summary
Security update for haproxy
Severity
Important
Notes
Title of the patch: Security update for haproxy
Description of the patch: haproxy was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-3281: Information disclosure (bsc#937042).
- CVE-2015-4000: The Logjam Attack / weakdh.org (bsc#937202).
Patchnames: SUSE-SLE-HA-12-2015-625,SUSE-SLE12-CLOUD-5-2015-625
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for haproxy",
"title": "Title of the patch"
},
{
"category": "description",
"text": "haproxy was updated to fix two security issues.\n\nThese security issues were fixed:\n- CVE-2015-3281: Information disclosure (bsc#937042).\n- CVE-2015-4000: The Logjam Attack / weakdh.org (bsc#937202).\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-HA-12-2015-625,SUSE-SLE12-CLOUD-5-2015-625",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1663-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1663-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151663-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1663-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-October/001607.html"
},
{
"category": "self",
"summary": "SUSE Bug 937042",
"url": "https://bugzilla.suse.com/937042"
},
{
"category": "self",
"summary": "SUSE Bug 937202",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3281 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3281/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
}
],
"title": "Security update for haproxy",
"tracking": {
"current_release_date": "2015-07-08T15:49:48Z",
"generator": {
"date": "2015-07-08T15:49:48Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1663-1",
"initial_release_date": "2015-07-08T15:49:48Z",
"revision_history": [
{
"date": "2015-07-08T15:49:48Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "haproxy-1.5.4-2.4.1.s390x",
"product": {
"name": "haproxy-1.5.4-2.4.1.s390x",
"product_id": "haproxy-1.5.4-2.4.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "haproxy-1.5.4-2.4.1.x86_64",
"product": {
"name": "haproxy-1.5.4-2.4.1.x86_64",
"product_id": "haproxy-1.5.4-2.4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Availability Extension 12",
"product": {
"name": "SUSE Linux Enterprise High Availability Extension 12",
"product_id": "SUSE Linux Enterprise High Availability Extension 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-ha:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5",
"product": {
"name": "SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5",
"product_id": "SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-sle12-cloud-compute:5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-1.5.4-2.4.1.s390x as component of SUSE Linux Enterprise High Availability Extension 12",
"product_id": "SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x"
},
"product_reference": "haproxy-1.5.4-2.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-1.5.4-2.4.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 12",
"product_id": "SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64"
},
"product_reference": "haproxy-1.5.4-2.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "haproxy-1.5.4-2.4.1.x86_64 as component of SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5",
"product_id": "SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64"
},
"product_reference": "haproxy-1.5.4-2.4.1.x86_64",
"relates_to_product_reference": "SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-3281",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3281"
}
],
"notes": [
{
"category": "general",
"text": "The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3281",
"url": "https://www.suse.com/security/cve/CVE-2015-3281"
},
{
"category": "external",
"summary": "SUSE Bug 937042 for CVE-2015-3281",
"url": "https://bugzilla.suse.com/937042"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-3281",
"url": "https://bugzilla.suse.com/937202"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-07-08T15:49:48Z",
"details": "moderate"
}
],
"title": "CVE-2015-3281"
},
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5:haproxy-1.5.4-2.4.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.s390x",
"SUSE Linux Enterprise High Availability Extension 12:haproxy-1.5.4-2.4.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-07-08T15:49:48Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
}
]
}
SUSE-SU-2015:1695-1
Vulnerability from csaf_suse - Published: 2015-10-05 16:22 - Updated: 2015-10-05 16:22Summary
Security update for openssh
Severity
Moderate
Notes
Title of the patch: Security update for openssh
Description of the patch: OpenSSH was updated to fix several security issues and bugs.
Please note that due to a bug in the previous shipped openssh version, sshd might
not correctly restart. Please verify that the ssh daemon is running after installing
this update.
These security issues were fixed:
* CVE-2015-5352: The x11_open_helper function, when ForwardX11Trusted mode
is not used, lacked a check of the refusal deadline for X connections,
which made it easier for remote attackers to bypass intended access
restrictions via a connection outside of the permitted time window.
(bsc#936695)
* CVE-2015-5600: The kbdint_next_device function in auth2-chall.c
in sshd did not properly restrict the processing of keyboard-interactive
devices within a single connection, which made it easier for remote
attackers to conduct brute-force attacks or cause a denial of service
(CPU consumption) via a long and duplicative list in the ssh
-oKbdInteractiveDevices option, as demonstrated by a modified client
that provides a different password for each pam element on this list.
(bsc#938746)
* CVE-2015-4000: Removed and disabled weak DH groups to address LOGJAM.
(bsc#932483)
* Hardening patch to fix sftp RCE. (bsc#903649)
* CVE-2015-6563: The monitor component in sshd accepted extraneous username
data in MONITOR_REQ_PAM_INIT_CTX requests, which allowed local users to
conduct impersonation attacks by leveraging any SSH login access in
conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM
request, related to monitor.c and monitor_wrap.c.
* CVE-2015-6564: Use-after-free vulnerability in the mm_answer_pam_free_ctx
function in monitor.c in sshd might have allowed local users to gain
privileges by leveraging control of the sshd uid to send an unexpectedly
early MONITOR_REQ_PAM_FREE_CTX request.
Additional a bug was fixed that could lead to openssh not working in
chroot (bsc#947458).
Patchnames: sledsp4-openssh-12119,slessp4-openssh-12119
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
86 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "OpenSSH was updated to fix several security issues and bugs.\n\nPlease note that due to a bug in the previous shipped openssh version, sshd might\nnot correctly restart. Please verify that the ssh daemon is running after installing\nthis update.\n\nThese security issues were fixed:\n\n* CVE-2015-5352: The x11_open_helper function, when ForwardX11Trusted mode\n is not used, lacked a check of the refusal deadline for X connections,\n which made it easier for remote attackers to bypass intended access\n restrictions via a connection outside of the permitted time window.\n (bsc#936695)\n\n* CVE-2015-5600: The kbdint_next_device function in auth2-chall.c\n in sshd did not properly restrict the processing of keyboard-interactive\n devices within a single connection, which made it easier for remote\n attackers to conduct brute-force attacks or cause a denial of service\n (CPU consumption) via a long and duplicative list in the ssh\n -oKbdInteractiveDevices option, as demonstrated by a modified client\n that provides a different password for each pam element on this list.\n (bsc#938746)\n\n* CVE-2015-4000: Removed and disabled weak DH groups to address LOGJAM.\n (bsc#932483)\n\n* Hardening patch to fix sftp RCE. (bsc#903649)\n\n* CVE-2015-6563: The monitor component in sshd accepted extraneous username\n data in MONITOR_REQ_PAM_INIT_CTX requests, which allowed local users to\n conduct impersonation attacks by leveraging any SSH login access in\n conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM\n request, related to monitor.c and monitor_wrap.c.\n\n* CVE-2015-6564: Use-after-free vulnerability in the mm_answer_pam_free_ctx\n function in monitor.c in sshd might have allowed local users to gain\n privileges by leveraging control of the sshd uid to send an unexpectedly\n early MONITOR_REQ_PAM_FREE_CTX request.\n\nAdditional a bug was fixed that could lead to openssh not working in \nchroot (bsc#947458).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sledsp4-openssh-12119,slessp4-openssh-12119",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1695-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1695-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151695-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1695-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-October/001616.html"
},
{
"category": "self",
"summary": "SUSE Bug 903649",
"url": "https://bugzilla.suse.com/903649"
},
{
"category": "self",
"summary": "SUSE Bug 932483",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "self",
"summary": "SUSE Bug 936695",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "self",
"summary": "SUSE Bug 938746",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "self",
"summary": "SUSE Bug 939932",
"url": "https://bugzilla.suse.com/939932"
},
{
"category": "self",
"summary": "SUSE Bug 943006",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "self",
"summary": "SUSE Bug 943010",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "self",
"summary": "SUSE Bug 945484",
"url": "https://bugzilla.suse.com/945484"
},
{
"category": "self",
"summary": "SUSE Bug 945493",
"url": "https://bugzilla.suse.com/945493"
},
{
"category": "self",
"summary": "SUSE Bug 947458",
"url": "https://bugzilla.suse.com/947458"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5352 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5600 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6563 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6564 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6564/"
}
],
"title": "Security update for openssh",
"tracking": {
"current_release_date": "2015-10-05T16:22:28Z",
"generator": {
"date": "2015-10-05T16:22:28Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1695-1",
"initial_release_date": "2015-10-05T16:22:28Z",
"revision_history": [
{
"date": "2015-10-05T16:22:28Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-13.1.i586",
"product": {
"name": "openssh-6.6p1-13.1.i586",
"product_id": "openssh-6.6p1-13.1.i586"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-13.3.i586",
"product": {
"name": "openssh-askpass-gnome-6.6p1-13.3.i586",
"product_id": "openssh-askpass-gnome-6.6p1-13.3.i586"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-13.1.i586",
"product": {
"name": "openssh-helpers-6.6p1-13.1.i586",
"product_id": "openssh-helpers-6.6p1-13.1.i586"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-13.1.i586",
"product": {
"name": "openssh-fips-6.6p1-13.1.i586",
"product_id": "openssh-fips-6.6p1-13.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-13.1.ia64",
"product": {
"name": "openssh-6.6p1-13.1.ia64",
"product_id": "openssh-6.6p1-13.1.ia64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-13.3.ia64",
"product": {
"name": "openssh-askpass-gnome-6.6p1-13.3.ia64",
"product_id": "openssh-askpass-gnome-6.6p1-13.3.ia64"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-13.1.ia64",
"product": {
"name": "openssh-fips-6.6p1-13.1.ia64",
"product_id": "openssh-fips-6.6p1-13.1.ia64"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-13.1.ia64",
"product": {
"name": "openssh-helpers-6.6p1-13.1.ia64",
"product_id": "openssh-helpers-6.6p1-13.1.ia64"
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-13.1.ppc64",
"product": {
"name": "openssh-6.6p1-13.1.ppc64",
"product_id": "openssh-6.6p1-13.1.ppc64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-13.3.ppc64",
"product": {
"name": "openssh-askpass-gnome-6.6p1-13.3.ppc64",
"product_id": "openssh-askpass-gnome-6.6p1-13.3.ppc64"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-13.1.ppc64",
"product": {
"name": "openssh-fips-6.6p1-13.1.ppc64",
"product_id": "openssh-fips-6.6p1-13.1.ppc64"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-13.1.ppc64",
"product": {
"name": "openssh-helpers-6.6p1-13.1.ppc64",
"product_id": "openssh-helpers-6.6p1-13.1.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-13.1.s390x",
"product": {
"name": "openssh-6.6p1-13.1.s390x",
"product_id": "openssh-6.6p1-13.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-13.3.s390x",
"product": {
"name": "openssh-askpass-gnome-6.6p1-13.3.s390x",
"product_id": "openssh-askpass-gnome-6.6p1-13.3.s390x"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-13.1.s390x",
"product": {
"name": "openssh-fips-6.6p1-13.1.s390x",
"product_id": "openssh-fips-6.6p1-13.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-13.1.s390x",
"product": {
"name": "openssh-helpers-6.6p1-13.1.s390x",
"product_id": "openssh-helpers-6.6p1-13.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-6.6p1-13.1.x86_64",
"product": {
"name": "openssh-6.6p1-13.1.x86_64",
"product_id": "openssh-6.6p1-13.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-6.6p1-13.3.x86_64",
"product": {
"name": "openssh-askpass-gnome-6.6p1-13.3.x86_64",
"product_id": "openssh-askpass-gnome-6.6p1-13.3.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-helpers-6.6p1-13.1.x86_64",
"product": {
"name": "openssh-helpers-6.6p1-13.1.x86_64",
"product_id": "openssh-helpers-6.6p1-13.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-fips-6.6p1-13.1.x86_64",
"product": {
"name": "openssh-fips-6.6p1-13.1.x86_64",
"product_id": "openssh-fips-6.6p1-13.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sled:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586"
},
"product_reference": "openssh-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586"
},
"product_reference": "openssh-helpers-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-helpers-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586"
},
"product_reference": "openssh-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64"
},
"product_reference": "openssh-6.6p1-13.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64"
},
"product_reference": "openssh-6.6p1-13.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x"
},
"product_reference": "openssh-6.6p1-13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586"
},
"product_reference": "openssh-fips-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64"
},
"product_reference": "openssh-fips-6.6p1-13.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64"
},
"product_reference": "openssh-fips-6.6p1-13.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x"
},
"product_reference": "openssh-fips-6.6p1-13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-fips-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586"
},
"product_reference": "openssh-helpers-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64"
},
"product_reference": "openssh-helpers-6.6p1-13.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64"
},
"product_reference": "openssh-helpers-6.6p1-13.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x"
},
"product_reference": "openssh-helpers-6.6p1-13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-helpers-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586"
},
"product_reference": "openssh-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64"
},
"product_reference": "openssh-6.6p1-13.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64"
},
"product_reference": "openssh-6.6p1-13.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x"
},
"product_reference": "openssh-6.6p1-13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-6.6p1-13.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64"
},
"product_reference": "openssh-askpass-gnome-6.6p1-13.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586"
},
"product_reference": "openssh-fips-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64"
},
"product_reference": "openssh-fips-6.6p1-13.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64"
},
"product_reference": "openssh-fips-6.6p1-13.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x"
},
"product_reference": "openssh-fips-6.6p1-13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-fips-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-fips-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586"
},
"product_reference": "openssh-helpers-6.6p1-13.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64"
},
"product_reference": "openssh-helpers-6.6p1-13.1.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64"
},
"product_reference": "openssh-helpers-6.6p1-13.1.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x"
},
"product_reference": "openssh-helpers-6.6p1-13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-helpers-6.6p1-13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
},
"product_reference": "openssh-helpers-6.6p1-13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-05T16:22:28Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-5352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5352"
}
],
"notes": [
{
"category": "general",
"text": "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5352",
"url": "https://www.suse.com/security/cve/CVE-2015-5352"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 936695 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "external",
"summary": "SUSE Bug 938277 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/938277"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/992991"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-05T16:22:28Z",
"details": "moderate"
}
],
"title": "CVE-2015-5352"
},
{
"cve": "CVE-2015-5600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5600"
}
],
"notes": [
{
"category": "general",
"text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5600",
"url": "https://www.suse.com/security/cve/CVE-2015-5600"
},
{
"category": "external",
"summary": "SUSE Bug 1009988 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1009988"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 938746 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 943504 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943504"
},
{
"category": "external",
"summary": "SUSE Bug 945985 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/945985"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 954457 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/954457"
},
{
"category": "external",
"summary": "SUSE Bug 957883 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/957883"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-05T16:22:28Z",
"details": "important"
}
],
"title": "CVE-2015-5600"
},
{
"cve": "CVE-2015-6563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6563"
}
],
"notes": [
{
"category": "general",
"text": "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6563",
"url": "https://www.suse.com/security/cve/CVE-2015-6563"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-6563",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-05T16:22:28Z",
"details": "moderate"
}
],
"title": "CVE-2015-6563"
},
{
"cve": "CVE-2015-6564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6564"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6564",
"url": "https://www.suse.com/security/cve/CVE-2015-6564"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 942850 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/942850"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-6564",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssh-helpers-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-askpass-gnome-6.6p1-13.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-fips-6.6p1-13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssh-helpers-6.6p1-13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-05T16:22:28Z",
"details": "moderate"
}
],
"title": "CVE-2015-6564"
}
]
}
SUSE-SU-2015:1840-1
Vulnerability from csaf_suse - Published: 2015-10-19 16:07 - Updated: 2015-10-19 16:07Summary
Security update for openssh
Severity
Moderate
Notes
Title of the patch: Security update for openssh
Description of the patch: openssh was updated to fix four security issues.
These security issues were fixed:
- CVE-2015-5352: The x11_open_helper function in channels.c in ssh in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of the refusal deadline for X connections, which made it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window (bsc#936695).
- CVE-2015-5600: The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH did not properly restrict the processing of keyboard-interactive devices within a single connection, which made it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list (bsc#938746).
- CVE-2015-4000: Removed and disabled weak DH groups (bsc#932483).
- Hardening patch to fix sftp RCE (bsc#903649).
These non-security issues were fixed:
- bsc#914309: sshd inherits oom_adj -17 on SIGHUP causing DoS potential for oom_killer.
- bsc#673532: limits.conf fsize change in SLES10SP3 causing problems to WebSphere mqm user.
Patchnames: slessp2-openssh-12168
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
65 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssh",
"title": "Title of the patch"
},
{
"category": "description",
"text": "openssh was updated to fix four security issues.\n\nThese security issues were fixed:\n- CVE-2015-5352: The x11_open_helper function in channels.c in ssh in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of the refusal deadline for X connections, which made it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window (bsc#936695).\n- CVE-2015-5600: The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH did not properly restrict the processing of keyboard-interactive devices within a single connection, which made it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list (bsc#938746).\n- CVE-2015-4000: Removed and disabled weak DH groups (bsc#932483).\n- Hardening patch to fix sftp RCE (bsc#903649).\n\nThese non-security issues were fixed:\n- bsc#914309: sshd inherits oom_adj -17 on SIGHUP causing DoS potential for oom_killer.\n- bsc#673532: limits.conf fsize change in SLES10SP3 causing problems to WebSphere mqm user.\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp2-openssh-12168",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1840-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1840-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151840-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1840-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-October/001650.html"
},
{
"category": "self",
"summary": "SUSE Bug 673532",
"url": "https://bugzilla.suse.com/673532"
},
{
"category": "self",
"summary": "SUSE Bug 903649",
"url": "https://bugzilla.suse.com/903649"
},
{
"category": "self",
"summary": "SUSE Bug 905118",
"url": "https://bugzilla.suse.com/905118"
},
{
"category": "self",
"summary": "SUSE Bug 914309",
"url": "https://bugzilla.suse.com/914309"
},
{
"category": "self",
"summary": "SUSE Bug 932483",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "self",
"summary": "SUSE Bug 936695",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "self",
"summary": "SUSE Bug 938746",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5352 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5600 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5600/"
}
],
"title": "Security update for openssh",
"tracking": {
"current_release_date": "2015-10-19T16:07:14Z",
"generator": {
"date": "2015-10-19T16:07:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1840-1",
"initial_release_date": "2015-10-19T16:07:14Z",
"revision_history": [
{
"date": "2015-10-19T16:07:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssh-5.1p1-41.69.1.i586",
"product": {
"name": "openssh-5.1p1-41.69.1.i586",
"product_id": "openssh-5.1p1-41.69.1.i586"
}
},
{
"category": "product_version",
"name": "openssh-askpass-5.1p1-41.69.1.i586",
"product": {
"name": "openssh-askpass-5.1p1-41.69.1.i586",
"product_id": "openssh-askpass-5.1p1-41.69.1.i586"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-5.1p1-41.69.4.i586",
"product": {
"name": "openssh-askpass-gnome-5.1p1-41.69.4.i586",
"product_id": "openssh-askpass-gnome-5.1p1-41.69.4.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-5.1p1-41.69.1.s390x",
"product": {
"name": "openssh-5.1p1-41.69.1.s390x",
"product_id": "openssh-5.1p1-41.69.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-askpass-5.1p1-41.69.1.s390x",
"product": {
"name": "openssh-askpass-5.1p1-41.69.1.s390x",
"product_id": "openssh-askpass-5.1p1-41.69.1.s390x"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"product": {
"name": "openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"product_id": "openssh-askpass-gnome-5.1p1-41.69.4.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssh-5.1p1-41.69.1.x86_64",
"product": {
"name": "openssh-5.1p1-41.69.1.x86_64",
"product_id": "openssh-5.1p1-41.69.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-5.1p1-41.69.1.x86_64",
"product": {
"name": "openssh-askpass-5.1p1-41.69.1.x86_64",
"product_id": "openssh-askpass-5.1p1-41.69.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssh-askpass-gnome-5.1p1-41.69.4.x86_64",
"product": {
"name": "openssh-askpass-gnome-5.1p1-41.69.4.x86_64",
"product_id": "openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-5.1p1-41.69.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586"
},
"product_reference": "openssh-5.1p1-41.69.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-5.1p1-41.69.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x"
},
"product_reference": "openssh-5.1p1-41.69.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-5.1p1-41.69.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64"
},
"product_reference": "openssh-5.1p1-41.69.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-5.1p1-41.69.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586"
},
"product_reference": "openssh-askpass-5.1p1-41.69.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-5.1p1-41.69.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x"
},
"product_reference": "openssh-askpass-5.1p1-41.69.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-5.1p1-41.69.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64"
},
"product_reference": "openssh-askpass-5.1p1-41.69.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-5.1p1-41.69.4.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586"
},
"product_reference": "openssh-askpass-gnome-5.1p1-41.69.4.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-5.1p1-41.69.4.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x"
},
"product_reference": "openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssh-askpass-gnome-5.1p1-41.69.4.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
},
"product_reference": "openssh-askpass-gnome-5.1p1-41.69.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-19T16:07:14Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-5352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5352"
}
],
"notes": [
{
"category": "general",
"text": "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5352",
"url": "https://www.suse.com/security/cve/CVE-2015-5352"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 936695 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/936695"
},
{
"category": "external",
"summary": "SUSE Bug 938277 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/938277"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 992991 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/992991"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5352",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-19T16:07:14Z",
"details": "moderate"
}
],
"title": "CVE-2015-5352"
},
{
"cve": "CVE-2015-5600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5600"
}
],
"notes": [
{
"category": "general",
"text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5600",
"url": "https://www.suse.com/security/cve/CVE-2015-5600"
},
{
"category": "external",
"summary": "SUSE Bug 1009988 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1009988"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1138392 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/1138392"
},
{
"category": "external",
"summary": "SUSE Bug 938746 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/938746"
},
{
"category": "external",
"summary": "SUSE Bug 943006 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943006"
},
{
"category": "external",
"summary": "SUSE Bug 943007 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943007"
},
{
"category": "external",
"summary": "SUSE Bug 943010 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943010"
},
{
"category": "external",
"summary": "SUSE Bug 943504 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/943504"
},
{
"category": "external",
"summary": "SUSE Bug 945985 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/945985"
},
{
"category": "external",
"summary": "SUSE Bug 948086 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/948086"
},
{
"category": "external",
"summary": "SUSE Bug 954457 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/954457"
},
{
"category": "external",
"summary": "SUSE Bug 957883 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/957883"
},
{
"category": "external",
"summary": "SUSE Bug 996040 for CVE-2015-5600",
"url": "https://bugzilla.suse.com/996040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-5.1p1-41.69.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssh-askpass-gnome-5.1p1-41.69.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-19T16:07:14Z",
"details": "important"
}
],
"title": "CVE-2015-5600"
}
]
}
SUSE-SU-2015:1851-1
Vulnerability from csaf_suse - Published: 2015-10-22 09:19 - Updated: 2015-10-22 09:19Summary
Security update for apache2
Severity
Moderate
Notes
Title of the patch: Security update for apache2
Description of the patch:
The Apache2 webserver was updated to fix several issues:
Security issues fixed:
- The chunked transfer coding implementation in the Apache HTTP Server
did not properly parse chunk headers, which allowed remote attackers to
conduct HTTP request smuggling attacks via a crafted request, related
to mishandling of large chunk-size values and invalid chunk-extension
characters in modules/http/http_filters.c. [bsc#938728, CVE-2015-3183]
- The LOGJAM security issue was addressed by: [bnc#931723 CVE-2015-4000]
* changing the SSLCipherSuite cipherstring to disable export cipher
suites and deploy Ephemeral Elliptic-Curve Diffie-Hellman (ECDHE)
ciphers.
* Adjust 'gensslcert' script to generate a strong and unique Diffie
Hellman Group and append it to the server certificate file.
- The ap_some_auth_required function in server/request.c in the Apache
HTTP Server 2.4.x did not consider that a Require directive may be
associated with an authorization setting rather than an authentication
setting, which allowed remote attackers to bypass intended access
restrictions in opportunistic circumstances by leveraging the presence
of a module that relies on the 2.2 API behavior.
[bnc#938723 bnc#939516 CVE-2015-3185]
- Tomcat mod_jk information leak due to incorrect JkMount/JkUnmount
directives processing [bnc#927845 CVE-2014-8111]
Other bugs fixed:
- Now provides a suse_maintenance_mmn_# [bnc#915666].
- Hardcoded modules in the %files [bnc#444878].
- Fixed the IfModule directive around SSLSessionCache [bnc#911159].
- allow only TCP ports in Yast2 firewall files [bnc#931002]
- fixed a regression when some LDAP searches or comparisons might be done
with the wrong credentials when a backend connection is reused
[bnc#930228]
- Fixed split-logfile2 script [bnc#869790]
- remove the changed MODULE_MAGIC_NUMBER_MINOR from which confuses
modules the way that they expect functionality that our apache does
not provide [bnc#915666]
- gensslcert: CN now defaults to `hostname -f` [bnc#949766], fix
help [bnc#949771]
Patchnames: SUSE-SLE-SDK-12-2015-772,SUSE-SLE-SERVER-12-2015-772,SUSE-Storage-1.0-2015-772
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
60 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for apache2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe Apache2 webserver was updated to fix several issues:\n\nSecurity issues fixed:\n- The chunked transfer coding implementation in the Apache HTTP Server\n did not properly parse chunk headers, which allowed remote attackers to\n conduct HTTP request smuggling attacks via a crafted request, related\n to mishandling of large chunk-size values and invalid chunk-extension\n characters in modules/http/http_filters.c. [bsc#938728, CVE-2015-3183]\n- The LOGJAM security issue was addressed by: [bnc#931723 CVE-2015-4000]\n * changing the SSLCipherSuite cipherstring to disable export cipher\n suites and deploy Ephemeral Elliptic-Curve Diffie-Hellman (ECDHE)\n ciphers.\n * Adjust \u0027gensslcert\u0027 script to generate a strong and unique Diffie\n Hellman Group and append it to the server certificate file.\n- The ap_some_auth_required function in server/request.c in the Apache\n HTTP Server 2.4.x did not consider that a Require directive may be\n associated with an authorization setting rather than an authentication\n setting, which allowed remote attackers to bypass intended access\n restrictions in opportunistic circumstances by leveraging the presence\n of a module that relies on the 2.2 API behavior.\n [bnc#938723 bnc#939516 CVE-2015-3185]\n- Tomcat mod_jk information leak due to incorrect JkMount/JkUnmount\n directives processing [bnc#927845 CVE-2014-8111] \n\nOther bugs fixed:\n- Now provides a suse_maintenance_mmn_# [bnc#915666].\n- Hardcoded modules in the %files [bnc#444878].\n- Fixed the IfModule directive around SSLSessionCache [bnc#911159].\n- allow only TCP ports in Yast2 firewall files [bnc#931002]\n- fixed a regression when some LDAP searches or comparisons might be done \n with the wrong credentials when a backend connection is reused\n [bnc#930228]\n- Fixed split-logfile2 script [bnc#869790]\n- remove the changed MODULE_MAGIC_NUMBER_MINOR from which confuses\n modules the way that they expect functionality that our apache does\n not provide [bnc#915666]\n- gensslcert: CN now defaults to `hostname -f` [bnc#949766], fix\n help [bnc#949771]\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SDK-12-2015-772,SUSE-SLE-SERVER-12-2015-772,SUSE-Storage-1.0-2015-772",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1851-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:1851-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151851-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:1851-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-October/001653.html"
},
{
"category": "self",
"summary": "SUSE Bug 444878",
"url": "https://bugzilla.suse.com/444878"
},
{
"category": "self",
"summary": "SUSE Bug 869790",
"url": "https://bugzilla.suse.com/869790"
},
{
"category": "self",
"summary": "SUSE Bug 911159",
"url": "https://bugzilla.suse.com/911159"
},
{
"category": "self",
"summary": "SUSE Bug 915666",
"url": "https://bugzilla.suse.com/915666"
},
{
"category": "self",
"summary": "SUSE Bug 927845",
"url": "https://bugzilla.suse.com/927845"
},
{
"category": "self",
"summary": "SUSE Bug 930228",
"url": "https://bugzilla.suse.com/930228"
},
{
"category": "self",
"summary": "SUSE Bug 931002",
"url": "https://bugzilla.suse.com/931002"
},
{
"category": "self",
"summary": "SUSE Bug 931723",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "self",
"summary": "SUSE Bug 938723",
"url": "https://bugzilla.suse.com/938723"
},
{
"category": "self",
"summary": "SUSE Bug 938728",
"url": "https://bugzilla.suse.com/938728"
},
{
"category": "self",
"summary": "SUSE Bug 939516",
"url": "https://bugzilla.suse.com/939516"
},
{
"category": "self",
"summary": "SUSE Bug 949766",
"url": "https://bugzilla.suse.com/949766"
},
{
"category": "self",
"summary": "SUSE Bug 949771",
"url": "https://bugzilla.suse.com/949771"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-8111 page",
"url": "https://www.suse.com/security/cve/CVE-2014-8111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3183 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3185 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
}
],
"title": "Security update for apache2",
"tracking": {
"current_release_date": "2015-10-22T09:19:23Z",
"generator": {
"date": "2015-10-22T09:19:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:1851-1",
"initial_release_date": "2015-10-22T09:19:23Z",
"revision_history": [
{
"date": "2015-10-22T09:19:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "apache2-doc-2.4.10-14.10.1.noarch",
"product": {
"name": "apache2-doc-2.4.10-14.10.1.noarch",
"product_id": "apache2-doc-2.4.10-14.10.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-devel-2.4.10-14.10.1.ppc64le",
"product": {
"name": "apache2-devel-2.4.10-14.10.1.ppc64le",
"product_id": "apache2-devel-2.4.10-14.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-2.4.10-14.10.1.ppc64le",
"product": {
"name": "apache2-2.4.10-14.10.1.ppc64le",
"product_id": "apache2-2.4.10-14.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.4.10-14.10.1.ppc64le",
"product": {
"name": "apache2-example-pages-2.4.10-14.10.1.ppc64le",
"product_id": "apache2-example-pages-2.4.10-14.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"product": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"product_id": "apache2-mod_auth_kerb-5.4-2.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"product": {
"name": "apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"product_id": "apache2-mod_jk-1.2.40-2.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"product": {
"name": "apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"product_id": "apache2-mod_security2-2.8.0-3.4.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.10-14.10.1.ppc64le",
"product": {
"name": "apache2-prefork-2.4.10-14.10.1.ppc64le",
"product_id": "apache2-prefork-2.4.10-14.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.10-14.10.1.ppc64le",
"product": {
"name": "apache2-utils-2.4.10-14.10.1.ppc64le",
"product_id": "apache2-utils-2.4.10-14.10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.10-14.10.1.ppc64le",
"product": {
"name": "apache2-worker-2.4.10-14.10.1.ppc64le",
"product_id": "apache2-worker-2.4.10-14.10.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-devel-2.4.10-14.10.1.s390x",
"product": {
"name": "apache2-devel-2.4.10-14.10.1.s390x",
"product_id": "apache2-devel-2.4.10-14.10.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-2.4.10-14.10.1.s390x",
"product": {
"name": "apache2-2.4.10-14.10.1.s390x",
"product_id": "apache2-2.4.10-14.10.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.4.10-14.10.1.s390x",
"product": {
"name": "apache2-example-pages-2.4.10-14.10.1.s390x",
"product_id": "apache2-example-pages-2.4.10-14.10.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"product": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"product_id": "apache2-mod_auth_kerb-5.4-2.4.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-mod_jk-1.2.40-2.6.1.s390x",
"product": {
"name": "apache2-mod_jk-1.2.40-2.6.1.s390x",
"product_id": "apache2-mod_jk-1.2.40-2.6.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-mod_security2-2.8.0-3.4.1.s390x",
"product": {
"name": "apache2-mod_security2-2.8.0-3.4.1.s390x",
"product_id": "apache2-mod_security2-2.8.0-3.4.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.10-14.10.1.s390x",
"product": {
"name": "apache2-prefork-2.4.10-14.10.1.s390x",
"product_id": "apache2-prefork-2.4.10-14.10.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.10-14.10.1.s390x",
"product": {
"name": "apache2-utils-2.4.10-14.10.1.s390x",
"product_id": "apache2-utils-2.4.10-14.10.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.10-14.10.1.s390x",
"product": {
"name": "apache2-worker-2.4.10-14.10.1.s390x",
"product_id": "apache2-worker-2.4.10-14.10.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-devel-2.4.10-14.10.1.x86_64",
"product": {
"name": "apache2-devel-2.4.10-14.10.1.x86_64",
"product_id": "apache2-devel-2.4.10-14.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-2.4.10-14.10.1.x86_64",
"product": {
"name": "apache2-2.4.10-14.10.1.x86_64",
"product_id": "apache2-2.4.10-14.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-example-pages-2.4.10-14.10.1.x86_64",
"product": {
"name": "apache2-example-pages-2.4.10-14.10.1.x86_64",
"product_id": "apache2-example-pages-2.4.10-14.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"product": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"product_id": "apache2-mod_auth_kerb-5.4-2.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-mod_jk-1.2.40-2.6.1.x86_64",
"product": {
"name": "apache2-mod_jk-1.2.40-2.6.1.x86_64",
"product_id": "apache2-mod_jk-1.2.40-2.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-mod_security2-2.8.0-3.4.1.x86_64",
"product": {
"name": "apache2-mod_security2-2.8.0-3.4.1.x86_64",
"product_id": "apache2-mod_security2-2.8.0-3.4.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.10-14.10.1.x86_64",
"product": {
"name": "apache2-prefork-2.4.10-14.10.1.x86_64",
"product_id": "apache2-prefork-2.4.10-14.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.10-14.10.1.x86_64",
"product": {
"name": "apache2-utils-2.4.10-14.10.1.x86_64",
"product_id": "apache2-utils-2.4.10-14.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.10-14.10.1.x86_64",
"product": {
"name": "apache2-worker-2.4.10-14.10.1.x86_64",
"product_id": "apache2-worker-2.4.10-14.10.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"product": {
"name": "apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"product_id": "apache2-mod_fastcgi-2.4.7-3.4.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 1.0",
"product": {
"name": "SUSE Enterprise Storage 1.0",
"product_id": "SUSE Enterprise Storage 1.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:1.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-devel-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-devel-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-devel-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.4.10-14.10.1.noarch as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch"
},
"product_reference": "apache2-doc-2.4.10-14.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-example-pages-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-example-pages-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-example-pages-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le"
},
"product_reference": "apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x"
},
"product_reference": "apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64"
},
"product_reference": "apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_jk-1.2.40-2.6.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le"
},
"product_reference": "apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_jk-1.2.40-2.6.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x"
},
"product_reference": "apache2-mod_jk-1.2.40-2.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_jk-1.2.40-2.6.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64"
},
"product_reference": "apache2-mod_jk-1.2.40-2.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_security2-2.8.0-3.4.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le"
},
"product_reference": "apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_security2-2.8.0-3.4.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x"
},
"product_reference": "apache2-mod_security2-2.8.0-3.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_security2-2.8.0-3.4.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64"
},
"product_reference": "apache2-mod_security2-2.8.0-3.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-prefork-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-prefork-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-prefork-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-utils-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-utils-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-utils-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-worker-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-worker-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-worker-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-doc-2.4.10-14.10.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch"
},
"product_reference": "apache2-doc-2.4.10-14.10.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-example-pages-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-example-pages-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-example-pages-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-example-pages-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le"
},
"product_reference": "apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x"
},
"product_reference": "apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_auth_kerb-5.4-2.4.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64"
},
"product_reference": "apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_jk-1.2.40-2.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le"
},
"product_reference": "apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_jk-1.2.40-2.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x"
},
"product_reference": "apache2-mod_jk-1.2.40-2.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_jk-1.2.40-2.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64"
},
"product_reference": "apache2-mod_jk-1.2.40-2.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_security2-2.8.0-3.4.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le"
},
"product_reference": "apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_security2-2.8.0-3.4.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x"
},
"product_reference": "apache2-mod_security2-2.8.0-3.4.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_security2-2.8.0-3.4.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64"
},
"product_reference": "apache2-mod_security2-2.8.0-3.4.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-prefork-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-prefork-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-prefork-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-utils-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-utils-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-utils-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.10-14.10.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le"
},
"product_reference": "apache2-worker-2.4.10-14.10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.10-14.10.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x"
},
"product_reference": "apache2-worker-2.4.10-14.10.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.10-14.10.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64"
},
"product_reference": "apache2-worker-2.4.10-14.10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-mod_fastcgi-2.4.7-3.4.1.x86_64 as component of SUSE Enterprise Storage 1.0",
"product_id": "SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64"
},
"product_reference": "apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 1.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-8111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-8111"
}
],
"notes": [
{
"category": "general",
"text": "Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-8111",
"url": "https://www.suse.com/security/cve/CVE-2014-8111"
},
{
"category": "external",
"summary": "SUSE Bug 927845 for CVE-2014-8111",
"url": "https://bugzilla.suse.com/927845"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-22T09:19:23Z",
"details": "moderate"
}
],
"title": "CVE-2014-8111"
},
{
"cve": "CVE-2015-3183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3183"
}
],
"notes": [
{
"category": "general",
"text": "The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3183",
"url": "https://www.suse.com/security/cve/CVE-2015-3183"
},
{
"category": "external",
"summary": "SUSE Bug 938728 for CVE-2015-3183",
"url": "https://bugzilla.suse.com/938728"
},
{
"category": "external",
"summary": "SUSE Bug 948325 for CVE-2015-3183",
"url": "https://bugzilla.suse.com/948325"
},
{
"category": "external",
"summary": "SUSE Bug 949218 for CVE-2015-3183",
"url": "https://bugzilla.suse.com/949218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-22T09:19:23Z",
"details": "moderate"
}
],
"title": "CVE-2015-3183"
},
{
"cve": "CVE-2015-3185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3185"
}
],
"notes": [
{
"category": "general",
"text": "The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3185",
"url": "https://www.suse.com/security/cve/CVE-2015-3185"
},
{
"category": "external",
"summary": "SUSE Bug 938723 for CVE-2015-3185",
"url": "https://bugzilla.suse.com/938723"
},
{
"category": "external",
"summary": "SUSE Bug 939514 for CVE-2015-3185",
"url": "https://bugzilla.suse.com/939514"
},
{
"category": "external",
"summary": "SUSE Bug 939516 for CVE-2015-3185",
"url": "https://bugzilla.suse.com/939516"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-22T09:19:23Z",
"details": "moderate"
}
],
"title": "CVE-2015-3185"
},
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 1.0:apache2-mod_fastcgi-2.4.7-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-doc-2.4.10-14.10.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-example-pages-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_auth_kerb-5.4-2.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_jk-1.2.40-2.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-mod_security2-2.8.0-3.4.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-prefork-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-utils-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:apache2-worker-2.4.10-14.10.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:apache2-devel-2.4.10-14.10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2015-10-22T09:19:23Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
}
]
}
SUSE-SU-2016:0224-1
Vulnerability from csaf_suse - Published: 2016-01-25 08:47 - Updated: 2016-01-25 08:47Summary
Security update for openldap2
Severity
Important
Notes
Title of the patch: Security update for openldap2
Description of the patch: This update fixes the following security issues:
- CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial
of service (reachable assertion and application crash) via crafted BER data, as
demonstrated by an attack against slapd. (bsc#945582)
- CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766)
It also fixes the following non-security bugs:
- bsc#955210: Unresponsive LDAP host lookups in IPv6 environment
This update adds the following functionality:
- fate#319300: SHA2 password hashing module that can be loaded on-demand.
Patchnames: SUSE-SLE-DESKTOP-12-2016-139,SUSE-SLE-DESKTOP-12-SP1-2016-139,SUSE-SLE-Module-Legacy-12-2016-139,SUSE-SLE-SAP-12-2016-139,SUSE-SLE-SDK-12-2016-139,SUSE-SLE-SDK-12-SP1-2016-139,SUSE-SLE-SERVER-12-2016-139,SUSE-SLE-SERVER-12-SP1-2016-139
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openldap2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update fixes the following security issues:\n\n- CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial\n of service (reachable assertion and application crash) via crafted BER data, as\n demonstrated by an attack against slapd. (bsc#945582)\n- CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766)\n\nIt also fixes the following non-security bugs:\n\n- bsc#955210: Unresponsive LDAP host lookups in IPv6 environment\n\nThis update adds the following functionality:\n\n- fate#319300: SHA2 password hashing module that can be loaded on-demand. \n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-139,SUSE-SLE-DESKTOP-12-SP1-2016-139,SUSE-SLE-Module-Legacy-12-2016-139,SUSE-SLE-SAP-12-2016-139,SUSE-SLE-SDK-12-2016-139,SUSE-SLE-SDK-12-SP1-2016-139,SUSE-SLE-SERVER-12-2016-139,SUSE-SLE-SERVER-12-SP1-2016-139",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0224-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0224-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160224-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0224-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-January/001823.html"
},
{
"category": "self",
"summary": "SUSE Bug 937766",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "self",
"summary": "SUSE Bug 945582",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "self",
"summary": "SUSE Bug 955210",
"url": "https://bugzilla.suse.com/955210"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6908 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6908/"
}
],
"title": "Security update for openldap2",
"tracking": {
"current_release_date": "2016-01-25T08:47:53Z",
"generator": {
"date": "2016-01-25T08:47:53Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0224-1",
"initial_release_date": "2016-01-25T08:47:53Z",
"revision_history": [
{
"date": "2016-01-25T08:47:53Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"product": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"product_id": "compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le"
}
},
{
"category": "product_version",
"name": "openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"product": {
"name": "openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"product_id": "openldap2-back-perl-2.4.41-18.13.4.ppc64le"
}
},
{
"category": "product_version",
"name": "openldap2-devel-2.4.41-18.13.1.ppc64le",
"product": {
"name": "openldap2-devel-2.4.41-18.13.1.ppc64le",
"product_id": "openldap2-devel-2.4.41-18.13.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"product": {
"name": "openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"product_id": "openldap2-devel-static-2.4.41-18.13.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"product": {
"name": "libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"product_id": "libldap-2_4-2-2.4.41-18.13.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openldap2-2.4.41-18.13.4.ppc64le",
"product": {
"name": "openldap2-2.4.41-18.13.4.ppc64le",
"product_id": "openldap2-2.4.41-18.13.4.ppc64le"
}
},
{
"category": "product_version",
"name": "openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"product": {
"name": "openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"product_id": "openldap2-back-meta-2.4.41-18.13.4.ppc64le"
}
},
{
"category": "product_version",
"name": "openldap2-client-2.4.41-18.13.1.ppc64le",
"product": {
"name": "openldap2-client-2.4.41-18.13.1.ppc64le",
"product_id": "openldap2-client-2.4.41-18.13.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"product": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"product_id": "compat-libldap-2_3-0-2.3.37-18.13.4.s390x"
}
},
{
"category": "product_version",
"name": "openldap2-back-perl-2.4.41-18.13.4.s390x",
"product": {
"name": "openldap2-back-perl-2.4.41-18.13.4.s390x",
"product_id": "openldap2-back-perl-2.4.41-18.13.4.s390x"
}
},
{
"category": "product_version",
"name": "openldap2-devel-2.4.41-18.13.1.s390x",
"product": {
"name": "openldap2-devel-2.4.41-18.13.1.s390x",
"product_id": "openldap2-devel-2.4.41-18.13.1.s390x"
}
},
{
"category": "product_version",
"name": "openldap2-devel-static-2.4.41-18.13.1.s390x",
"product": {
"name": "openldap2-devel-static-2.4.41-18.13.1.s390x",
"product_id": "openldap2-devel-static-2.4.41-18.13.1.s390x"
}
},
{
"category": "product_version",
"name": "libldap-2_4-2-2.4.41-18.13.1.s390x",
"product": {
"name": "libldap-2_4-2-2.4.41-18.13.1.s390x",
"product_id": "libldap-2_4-2-2.4.41-18.13.1.s390x"
}
},
{
"category": "product_version",
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"product": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"product_id": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x"
}
},
{
"category": "product_version",
"name": "openldap2-2.4.41-18.13.4.s390x",
"product": {
"name": "openldap2-2.4.41-18.13.4.s390x",
"product_id": "openldap2-2.4.41-18.13.4.s390x"
}
},
{
"category": "product_version",
"name": "openldap2-back-meta-2.4.41-18.13.4.s390x",
"product": {
"name": "openldap2-back-meta-2.4.41-18.13.4.s390x",
"product_id": "openldap2-back-meta-2.4.41-18.13.4.s390x"
}
},
{
"category": "product_version",
"name": "openldap2-client-2.4.41-18.13.1.s390x",
"product": {
"name": "openldap2-client-2.4.41-18.13.1.s390x",
"product_id": "openldap2-client-2.4.41-18.13.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"product": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"product_id": "libldap-2_4-2-2.4.41-18.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"product": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"product_id": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "openldap2-client-2.4.41-18.13.1.x86_64",
"product": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64",
"product_id": "openldap2-client-2.4.41-18.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"product": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"product_id": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64"
}
},
{
"category": "product_version",
"name": "openldap2-back-perl-2.4.41-18.13.4.x86_64",
"product": {
"name": "openldap2-back-perl-2.4.41-18.13.4.x86_64",
"product_id": "openldap2-back-perl-2.4.41-18.13.4.x86_64"
}
},
{
"category": "product_version",
"name": "openldap2-devel-2.4.41-18.13.1.x86_64",
"product": {
"name": "openldap2-devel-2.4.41-18.13.1.x86_64",
"product_id": "openldap2-devel-2.4.41-18.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "openldap2-devel-static-2.4.41-18.13.1.x86_64",
"product": {
"name": "openldap2-devel-static-2.4.41-18.13.1.x86_64",
"product_id": "openldap2-devel-static-2.4.41-18.13.1.x86_64"
}
},
{
"category": "product_version",
"name": "openldap2-2.4.41-18.13.4.x86_64",
"product": {
"name": "openldap2-2.4.41-18.13.4.x86_64",
"product_id": "openldap2-2.4.41-18.13.4.x86_64"
}
},
{
"category": "product_version",
"name": "openldap2-back-meta-2.4.41-18.13.4.x86_64",
"product": {
"name": "openldap2-back-meta-2.4.41-18.13.4.x86_64",
"product_id": "openldap2-back-meta-2.4.41-18.13.4.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 12",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le"
},
"product_reference": "compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.s390x as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x"
},
"product_reference": "compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64 as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64"
},
"product_reference": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64"
},
"product_reference": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-perl-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-perl-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-back-perl-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-perl-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-back-perl-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-devel-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-devel-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-devel-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-static-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-static-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-devel-static-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-static-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-devel-static-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-perl-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-perl-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-back-perl-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-perl-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-back-perl-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-devel-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-devel-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-devel-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-static-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-static-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-devel-static-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-static-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-devel-static-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64"
},
"product_reference": "compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64"
},
"product_reference": "libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-back-meta-2.4.41-18.13.4.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64"
},
"product_reference": "openldap2-back-meta-2.4.41-18.13.4.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-client-2.4.41-18.13.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64"
},
"product_reference": "openldap2-client-2.4.41-18.13.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-01-25T08:47:53Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-6908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6908"
}
],
"notes": [
{
"category": "general",
"text": "The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6908",
"url": "https://www.suse.com/security/cve/CVE-2015-6908"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-6908",
"url": "https://bugzilla.suse.com/945582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Desktop 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.ppc64le",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.s390x",
"SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:compat-libldap-2_3-0-2.3.37-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:libldap-2_4-2-32bit-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-back-meta-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:openldap2-client-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:openldap2-devel-static-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-back-perl-2.4.41-18.13.4.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-2.4.41-18.13.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12:openldap2-devel-static-2.4.41-18.13.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-01-25T08:47:53Z",
"details": "important"
}
],
"title": "CVE-2015-6908"
}
]
}
SUSE-SU-2016:0262-1
Vulnerability from csaf_suse - Published: 2016-01-27 14:24 - Updated: 2016-01-27 14:24Summary
Security update for openldap2
Severity
Important
Notes
Title of the patch: Security update for openldap2
Description of the patch: This update fixes the following security issues:
- CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial
of service (reachable assertion and application crash) via crafted BER data, as
demonstrated by an attack against slapd. (bsc#945582)
- CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766)
Patchnames: slestso13-openldap2-20160114-12372
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openldap2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update fixes the following security issues:\n\n- CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial\n of service (reachable assertion and application crash) via crafted BER data, as\n demonstrated by an attack against slapd. (bsc#945582)\n- CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slestso13-openldap2-20160114-12372",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0262-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0262-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160262-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0262-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-January/001831.html"
},
{
"category": "self",
"summary": "SUSE Bug 937766",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "self",
"summary": "SUSE Bug 945582",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6908 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6908/"
}
],
"title": "Security update for openldap2",
"tracking": {
"current_release_date": "2016-01-27T14:24:17Z",
"generator": {
"date": "2016-01-27T14:24:17Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0262-1",
"initial_release_date": "2016-01-27T14:24:17Z",
"revision_history": [
{
"date": "2016-01-27T14:24:17Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openldap2-devel-2.4.26-0.17.23.1.x86_64",
"product": {
"name": "openldap2-devel-2.4.26-0.17.23.1.x86_64",
"product_id": "openldap2-devel-2.4.26-0.17.23.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Studio Onsite 1.3",
"product": {
"name": "SUSE Studio Onsite 1.3",
"product_id": "SUSE Studio Onsite 1.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-studioonsite:1.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openldap2-devel-2.4.26-0.17.23.1.x86_64 as component of SUSE Studio Onsite 1.3",
"product_id": "SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64"
},
"product_reference": "openldap2-devel-2.4.26-0.17.23.1.x86_64",
"relates_to_product_reference": "SUSE Studio Onsite 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-01-27T14:24:17Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-6908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6908"
}
],
"notes": [
{
"category": "general",
"text": "The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6908",
"url": "https://www.suse.com/security/cve/CVE-2015-6908"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-6908",
"url": "https://bugzilla.suse.com/945582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Studio Onsite 1.3:openldap2-devel-2.4.26-0.17.23.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-01-27T14:24:17Z",
"details": "important"
}
],
"title": "CVE-2015-6908"
}
]
}
SUSE-SU-2016:0344-1
Vulnerability from csaf_suse - Published: 2016-02-05 09:11 - Updated: 2016-02-05 09:11Summary
Security update for socat
Severity
Moderate
Notes
Title of the patch: Security update for socat
Description of the patch:
This update for socat fixed the following issues:
- bsc#964844: Fixed security advisory 8, Stack overflow in parser, http://www.openwall.com/lists/oss-security/2016/02/01/5.
- bsc#938913: Improved resilience against Logjam attacks (CVE-2015-4000) by increasing the size of the default DH group from 512 to 2048 bit. This change avoids the non-prime 1024 bit DH p parameter in OpenSSL http://www.dest-unreach.org/socat/contrib/socat-secadv7.html.
Patchnames: SUSE-SLE-DESKTOP-12-2016-209,SUSE-SLE-DESKTOP-12-SP1-2016-209,SUSE-SLE-SERVER-12-2016-209,SUSE-SLE-SERVER-12-SP1-2016-209
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:socat-1.7.2.4-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12:socat-1.7.2.4-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
36 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for socat",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for socat fixed the following issues:\n\n- bsc#964844: Fixed security advisory 8, Stack overflow in parser, http://www.openwall.com/lists/oss-security/2016/02/01/5.\n- bsc#938913: Improved resilience against Logjam attacks (CVE-2015-4000) by increasing the size of the default DH group from 512 to 2048 bit. This change avoids the non-prime 1024 bit DH p parameter in OpenSSL http://www.dest-unreach.org/socat/contrib/socat-secadv7.html.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-209,SUSE-SLE-DESKTOP-12-SP1-2016-209,SUSE-SLE-SERVER-12-2016-209,SUSE-SLE-SERVER-12-SP1-2016-209",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0344-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0344-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160344-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0344-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-February/001851.html"
},
{
"category": "self",
"summary": "SUSE Bug 938913",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "self",
"summary": "SUSE Bug 964844",
"url": "https://bugzilla.suse.com/964844"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
}
],
"title": "Security update for socat",
"tracking": {
"current_release_date": "2016-02-05T09:11:54Z",
"generator": {
"date": "2016-02-05T09:11:54Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0344-1",
"initial_release_date": "2016-02-05T09:11:54Z",
"revision_history": [
{
"date": "2016-02-05T09:11:54Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "socat-1.7.2.4-3.1.ppc64le",
"product": {
"name": "socat-1.7.2.4-3.1.ppc64le",
"product_id": "socat-1.7.2.4-3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "socat-1.7.2.4-3.1.s390x",
"product": {
"name": "socat-1.7.2.4-3.1.s390x",
"product_id": "socat-1.7.2.4-3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "socat-1.7.2.4-3.1.x86_64",
"product": {
"name": "socat-1.7.2.4-3.1.x86_64",
"product_id": "socat-1.7.2.4-3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:socat-1.7.2.4-3.1.x86_64"
},
"product_reference": "socat-1.7.2.4-3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:socat-1.7.2.4-3.1.x86_64"
},
"product_reference": "socat-1.7.2.4-3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.ppc64le"
},
"product_reference": "socat-1.7.2.4-3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.s390x"
},
"product_reference": "socat-1.7.2.4-3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.x86_64"
},
"product_reference": "socat-1.7.2.4-3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.ppc64le"
},
"product_reference": "socat-1.7.2.4-3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.s390x"
},
"product_reference": "socat-1.7.2.4-3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.x86_64"
},
"product_reference": "socat-1.7.2.4-3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.ppc64le"
},
"product_reference": "socat-1.7.2.4-3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.s390x"
},
"product_reference": "socat-1.7.2.4-3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.x86_64"
},
"product_reference": "socat-1.7.2.4-3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.ppc64le"
},
"product_reference": "socat-1.7.2.4-3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.s390x"
},
"product_reference": "socat-1.7.2.4-3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "socat-1.7.2.4-3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.x86_64"
},
"product_reference": "socat-1.7.2.4-3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Desktop 12:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Desktop 12:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Desktop 12:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server 12:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:socat-1.7.2.4-3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:socat-1.7.2.4-3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-02-05T09:11:54Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
}
]
}
SUSE-SU-2016:1618-1
Vulnerability from csaf_suse - Published: 2016-06-17 14:57 - Updated: 2016-06-17 14:57Summary
Security update for mysql
Severity
Moderate
Notes
Title of the patch: Security update for mysql
Description of the patch:
This update for mysql fixes the following issues:
- bsc#959724: fix incorrect usage of sprintf/strcpy that caused possible buffer overflow issues at various places
On SUSE Linux Enterprise 11 SP4 this fix was not yet shipped:
- Increase the key length (to 2048 bits) used in vio/viosslfactories.c for creating
Diffie-Hellman keys (Logjam Attack) [bnc#934789] [CVE-2015-4000]
Patchnames: sdksp4-mysql-12620,slessp4-mysql-12620
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64 | — |
Vendor Fix
|
Threats
Impact
important
References
36 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for mysql",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for mysql fixes the following issues:\n\n- bsc#959724: fix incorrect usage of sprintf/strcpy that caused possible buffer overflow issues at various places\n\nOn SUSE Linux Enterprise 11 SP4 this fix was not yet shipped:\n- Increase the key length (to 2048 bits) used in vio/viosslfactories.c for creating\n Diffie-Hellman keys (Logjam Attack) [bnc#934789] [CVE-2015-4000]\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-mysql-12620,slessp4-mysql-12620",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1618-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1618-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161618-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1618-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002127.html"
},
{
"category": "self",
"summary": "SUSE Bug 934789",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "self",
"summary": "SUSE Bug 959724",
"url": "https://bugzilla.suse.com/959724"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4000 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4000/"
}
],
"title": "Security update for mysql",
"tracking": {
"current_release_date": "2016-06-17T14:57:52Z",
"generator": {
"date": "2016-06-17T14:57:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1618-1",
"initial_release_date": "2016-06-17T14:57:52Z",
"revision_history": [
{
"date": "2016-06-17T14:57:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.i586",
"product": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.i586",
"product_id": "libmysqlclient-devel-5.0.96-0.8.10.3.i586"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-5.0.96-0.8.10.3.i586",
"product": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.i586",
"product_id": "libmysqlclient15-5.0.96-0.8.10.3.i586"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"product": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"product_id": "libmysqlclient_r15-5.0.96-0.8.10.3.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.ia64",
"product": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.ia64",
"product_id": "libmysqlclient-devel-5.0.96-0.8.10.3.ia64"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64",
"product": {
"name": "libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64",
"product_id": "libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-5.0.96-0.8.10.3.ia64",
"product": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.ia64",
"product_id": "libmysqlclient15-5.0.96-0.8.10.3.ia64"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"product": {
"name": "libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"product_id": "libmysqlclient15-x86-5.0.96-0.8.10.3.ia64"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"product": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"product_id": "libmysqlclient_r15-5.0.96-0.8.10.3.ia64"
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.ppc64",
"product": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.ppc64",
"product_id": "libmysqlclient-devel-5.0.96-0.8.10.3.ppc64"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64",
"product": {
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64",
"product_id": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"product": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"product_id": "libmysqlclient15-5.0.96-0.8.10.3.ppc64"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"product": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"product_id": "libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"product": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"product_id": "libmysqlclient_r15-5.0.96-0.8.10.3.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.s390x",
"product": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.s390x",
"product_id": "libmysqlclient-devel-5.0.96-0.8.10.3.s390x"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x",
"product": {
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x",
"product_id": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-5.0.96-0.8.10.3.s390x",
"product": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.s390x",
"product_id": "libmysqlclient15-5.0.96-0.8.10.3.s390x"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"product": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"product_id": "libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"product": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"product_id": "libmysqlclient_r15-5.0.96-0.8.10.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.x86_64",
"product": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.x86_64",
"product_id": "libmysqlclient-devel-5.0.96-0.8.10.3.x86_64"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64",
"product": {
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64",
"product_id": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"product": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"product_id": "libmysqlclient15-5.0.96-0.8.10.3.x86_64"
}
},
{
"category": "product_version",
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"product": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"product_id": "libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64"
}
},
{
"category": "product_version",
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"product": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"product_id": "libmysqlclient_r15-5.0.96-0.8.10.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.i586"
},
"product_reference": "libmysqlclient-devel-5.0.96-0.8.10.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient-devel-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient-devel-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient-devel-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient-devel-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient-devel-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-x86-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient15-x86-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmysqlclient_r15-5.0.96-0.8.10.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64"
},
"product_reference": "libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-4000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4000"
}
],
"notes": [
{
"category": "general",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4000",
"url": "https://www.suse.com/security/cve/CVE-2015-4000"
},
{
"category": "external",
"summary": "SUSE Bug 1074631 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1074631"
},
{
"category": "external",
"summary": "SUSE Bug 1211968 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/1211968"
},
{
"category": "external",
"summary": "SUSE Bug 931600 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931600"
},
{
"category": "external",
"summary": "SUSE Bug 931698 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931698"
},
{
"category": "external",
"summary": "SUSE Bug 931723 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931723"
},
{
"category": "external",
"summary": "SUSE Bug 931845 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/931845"
},
{
"category": "external",
"summary": "SUSE Bug 932026 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932026"
},
{
"category": "external",
"summary": "SUSE Bug 932483 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/932483"
},
{
"category": "external",
"summary": "SUSE Bug 934789 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/934789"
},
{
"category": "external",
"summary": "SUSE Bug 935033 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935033"
},
{
"category": "external",
"summary": "SUSE Bug 935540 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935540"
},
{
"category": "external",
"summary": "SUSE Bug 935979 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/935979"
},
{
"category": "external",
"summary": "SUSE Bug 937202 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937202"
},
{
"category": "external",
"summary": "SUSE Bug 937766 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/937766"
},
{
"category": "external",
"summary": "SUSE Bug 938248 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938248"
},
{
"category": "external",
"summary": "SUSE Bug 938432 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938432"
},
{
"category": "external",
"summary": "SUSE Bug 938895 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938895"
},
{
"category": "external",
"summary": "SUSE Bug 938905 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938905"
},
{
"category": "external",
"summary": "SUSE Bug 938906 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938906"
},
{
"category": "external",
"summary": "SUSE Bug 938913 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938913"
},
{
"category": "external",
"summary": "SUSE Bug 938945 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/938945"
},
{
"category": "external",
"summary": "SUSE Bug 943664 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/943664"
},
{
"category": "external",
"summary": "SUSE Bug 944729 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/944729"
},
{
"category": "external",
"summary": "SUSE Bug 945582 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/945582"
},
{
"category": "external",
"summary": "SUSE Bug 955589 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/955589"
},
{
"category": "external",
"summary": "SUSE Bug 980406 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/980406"
},
{
"category": "external",
"summary": "SUSE Bug 990592 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/990592"
},
{
"category": "external",
"summary": "SUSE Bug 994144 for CVE-2015-4000",
"url": "https://bugzilla.suse.com/994144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient15-x86-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libmysqlclient_r15-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient-devel-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-32bit-5.0.96-0.8.10.3.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libmysqlclient_r15-x86-5.0.96-0.8.10.3.ia64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-17T14:57:52Z",
"details": "important"
}
],
"title": "CVE-2015-4000"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…