Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:2240-1

Опубликовано: 13 дек. 2020
Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Список пакетов

openSUSE Leap 15.2
openssh-8.1p1-lp152.4.9.1
openssh-askpass-gnome-8.1p1-lp152.4.9.1
openssh-cavs-8.1p1-lp152.4.9.1
openssh-fips-8.1p1-lp152.4.9.1
openssh-helpers-8.1p1-lp152.4.9.1

Ссылки

Описание

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

Затронутые продукты
openSUSE Leap 15.2:openssh-8.1p1-lp152.4.9.1
openSUSE Leap 15.2:openssh-askpass-gnome-8.1p1-lp152.4.9.1
openSUSE Leap 15.2:openssh-cavs-8.1p1-lp152.4.9.1
openSUSE Leap 15.2:openssh-fips-8.1p1-lp152.4.9.1
Ссылки