Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:3253-1

Опубликовано: 19 окт. 2018
Источник: suse-cvrf

Описание

Security update for libssh

This update for libssh fixes the following issues:

Security issue fixed:

  • CVE-2018-10933: Fixed a server mode authentication bypass (bsc#1108020).

Non security issue fixed:

  • Fix popd syntax to be compatible with newer versions of the bash shell.

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
libssh4-0.6.3-12.6.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libssh-devel-0.6.3-12.6.1
libssh-devel-doc-0.6.3-12.6.1
libssh4-0.6.3-12.6.1
SUSE Linux Enterprise Workstation Extension 12 SP3
libssh4-0.6.3-12.6.1

Ссылки

Описание

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libssh4-0.6.3-12.6.1
SUSE Linux Enterprise Software Development Kit 12 SP3:libssh-devel-0.6.3-12.6.1
SUSE Linux Enterprise Software Development Kit 12 SP3:libssh-devel-doc-0.6.3-12.6.1
SUSE Linux Enterprise Software Development Kit 12 SP3:libssh4-0.6.3-12.6.1
Ссылки
Уязвимость SUSE-SU-2018:3253-1