Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:4153-1

Опубликовано: 22 дек. 2021
Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2021-28041: Fixed double free in ssh-agent (bsc#1183137).

Список пакетов

openSUSE Leap 15.3
openssh-8.4p1-3.9.1
openssh-askpass-gnome-8.4p1-3.9.1
openssh-cavs-8.4p1-3.9.1
openssh-clients-8.4p1-3.9.1
openssh-common-8.4p1-3.9.1
openssh-fips-8.4p1-3.9.1
openssh-helpers-8.4p1-3.9.1
openssh-server-8.4p1-3.9.1

Ссылки

Описание

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.

Затронутые продукты
openSUSE Leap 15.3:openssh-8.4p1-3.9.1
openSUSE Leap 15.3:openssh-askpass-gnome-8.4p1-3.9.1
openSUSE Leap 15.3:openssh-cavs-8.4p1-3.9.1
openSUSE Leap 15.3:openssh-clients-8.4p1-3.9.1
Ссылки