Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2393-1

Опубликовано: 10 июл. 2024
Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

Security fixes:

  • CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318).

Other fixes:

  • Add obsoletes for openssh-server-config-rootlogin (bsc#1227350).
  • Add #include <stdlib.h> in some files added by the ldap patch to fix build with gcc14 (bsc#1225904).
  • Remove the recommendation for openssh-server-config-rootlogin from openssh-server (bsc#1224392).

Список пакетов

Container suse/git:latest
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Container suse/manager/5.0/x86_64/proxy-ssh:latest
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-fips-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Container suse/manager/5.0/x86_64/server:latest
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-fips-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-Azure-Basic
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-Azure-Standard
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-BYOS-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-BYOS-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-BYOS-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-CHOST-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-CHOST-BYOS-Aliyun
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-CHOST-BYOS-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-CHOST-BYOS-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-CHOST-BYOS-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-CHOST-BYOS-GDC
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-EC2-ECS-HVM
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC-BYOS-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC-BYOS-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC-BYOS-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-HPC-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-Hardened-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-Hardened-BYOS-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-Hardened-BYOS-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-Hardened-BYOS-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-BYOS-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-BYOS-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-BYOS-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened-BYOS
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAP-Hardened-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAPCAL
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAPCAL-Azure
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAPCAL-EC2
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image SLES15-SP6-SAPCAL-GCE
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image proxy-ssh-image
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-fips-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
Image server-image
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-fips-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
openssh-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-fips-9.6p1-150600.6.6.1
openssh-helpers-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
openssh-server-config-disallow-rootlogin-9.6p1-150600.6.6.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6
openssh-askpass-gnome-9.6p1-150600.6.6.1
openSUSE Leap 15.6
openssh-9.6p1-150600.6.6.1
openssh-askpass-gnome-9.6p1-150600.6.6.1
openssh-cavs-9.6p1-150600.6.6.1
openssh-clients-9.6p1-150600.6.6.1
openssh-common-9.6p1-150600.6.6.1
openssh-fips-9.6p1-150600.6.6.1
openssh-helpers-9.6p1-150600.6.6.1
openssh-server-9.6p1-150600.6.6.1
openssh-server-config-disallow-rootlogin-9.6p1-150600.6.6.1

Ссылки

Описание

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.

Затронутые продукты
Container suse/git:latest:openssh-clients-9.6p1-150600.6.6.1
Container suse/git:latest:openssh-common-9.6p1-150600.6.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:openssh-9.6p1-150600.6.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:openssh-clients-9.6p1-150600.6.6.1
Ссылки

Описание

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur.

Затронутые продукты
Container suse/git:latest:openssh-clients-9.6p1-150600.6.6.1
Container suse/git:latest:openssh-common-9.6p1-150600.6.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:openssh-9.6p1-150600.6.6.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:openssh-clients-9.6p1-150600.6.6.1
Ссылки
Уязвимость SUSE-SU-2024:2393-1