Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1059-1

Опубликовано: 27 апр. 2019
Источник: suse-cvrf

Описание

Security update for libssh2_org

This update for libssh2_org fixes the following issues:

  • Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103]

Список пакетов

Container suse/sles/15.2/virt-handler:0.38.1
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.2/virt-launcher:0.38.1
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.3/libguestfs-tools:0.45.0
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.3/virt-handler:0.45.0
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.3/virt-launcher:0.45.0
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.4/libguestfs-tools:0.49.0
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.4/virt-handler:0.49.0
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.4/virt-launcher:0.49.0
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.5/libguestfs-tools:0.58.0
libssh2-1-1.8.0-4.6.1
Container suse/sles/15.5/virt-launcher:0.58.0
libssh2-1-1.8.0-4.6.1
Image SLES15-SP3-EC2-HVM
libssh2-1-1.8.0-4.6.1
Image SLES15-SP3-SAP-Azure
libssh2-1-1.8.0-4.6.1
Image SLES15-SP3-SAP-EC2-HVM
libssh2-1-1.8.0-4.6.1
Image SLES15-SP3-SAP-GCE
libssh2-1-1.8.0-4.6.1
Image SLES15-SP4-SAP-Hardened-EC2
libssh2-1-1.8.0-4.6.1
Image SLES15-SP5-SAP-Azure
libssh2-1-1.8.0-4.6.1
Image SLES15-SP5-SAP-EC2
libssh2-1-1.8.0-4.6.1
Image SLES15-SP5-SAP-GCE
libssh2-1-1.8.0-4.6.1
Image SLES15-SP5-SAP-Hardened-EC2
libssh2-1-1.8.0-4.6.1
SUSE Linux Enterprise Module for Basesystem 15
libssh2-1-1.8.0-4.6.1
libssh2-devel-1.8.0-4.6.1

Ссылки

Описание

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

Затронутые продукты
Container suse/sles/15.2/virt-handler:0.38.1:libssh2-1-1.8.0-4.6.1
Container suse/sles/15.2/virt-launcher:0.38.1:libssh2-1-1.8.0-4.6.1
Container suse/sles/15.3/libguestfs-tools:0.45.0:libssh2-1-1.8.0-4.6.1
Container suse/sles/15.3/virt-handler:0.45.0:libssh2-1-1.8.0-4.6.1
Ссылки