Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3736-1

Опубликовано: 09 дек. 2020
Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513).

Список пакетов

Container ses/7/cephcsi/cephcsi:latest
openssh-8.1p1-5.9.1
openssh-fips-8.1p1-5.9.1
Container ses/7/rook/ceph:latest
openssh-8.1p1-5.9.1
openssh-fips-8.1p1-5.9.1
Image SLES15-SP2-Azure-Basic
openssh-8.1p1-5.9.1
Image SLES15-SP2-Azure-Standard
openssh-8.1p1-5.9.1
Image SLES15-SP2-BYOS-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-BYOS-EC2-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-BYOS-GCE
openssh-8.1p1-5.9.1
Image SLES15-SP2-CHOST-BYOS-Aliyun
openssh-8.1p1-5.9.1
Image SLES15-SP2-CHOST-BYOS-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-CHOST-BYOS-EC2
openssh-8.1p1-5.9.1
Image SLES15-SP2-CHOST-BYOS-GCE
openssh-8.1p1-5.9.1
Image SLES15-SP2-EC2-ECS-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-EC2-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-GCE
openssh-8.1p1-5.9.1
Image SLES15-SP2-HPC-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-HPC-BYOS-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-HPC-BYOS-EC2-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE
openssh-8.1p1-5.9.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-BYOS-Azure
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-BYOS-GCE
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-EC2-HVM
openssh-8.1p1-5.9.1
Image SLES15-SP2-SAP-GCE
openssh-8.1p1-5.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP2
openssh-8.1p1-5.9.1
openssh-helpers-8.1p1-5.9.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
openssh-askpass-gnome-8.1p1-5.9.1
SUSE Linux Enterprise Module for Server Applications 15 SP2
openssh-fips-8.1p1-5.9.1

Ссылки

Описание

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

Затронутые продукты
Container ses/7/cephcsi/cephcsi:latest:openssh-8.1p1-5.9.1
Container ses/7/cephcsi/cephcsi:latest:openssh-fips-8.1p1-5.9.1
Container ses/7/rook/ceph:latest:openssh-8.1p1-5.9.1
Container ses/7/rook/ceph:latest:openssh-fips-8.1p1-5.9.1
Ссылки