Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

SUSE 11-SP3: 2015:1582-1 Urgent: OpenSSL Vulnerability Threats

suse
Calendar Grey September 21, 2015
Scroller Suse
An important SUSE Security Patch for OpenSSH addresses various vulnerabilities, covering access limitations and defects.
An update that solves 5 vulnerabilities and has 6 fixes is An update that solves 5 vulnerabilities and has 6 fixes is An update that solves 5 vulnerabilities and has 6 fixes is now...

Summary

openssh was updated to fix several security issues and bugs. These security issues were fixed: * CVE-2015-5352: The x11_open_helper function in channels.c in ssh in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of the refusal deadline for X connections, which made it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window (bsc#936695). * CVE-2015-5600: The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH did not properly restrict the processing of keyboard-interactive devices within a single connection, which made it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in

Topics%20covered

Topics Covered

security advisory critical remote access openssh SUSE

References

#673532 #903649 #905118 #914309 #916549 #932483

#936695 #938746 #943006 #943010 #945493

Cross- CVE-2015-4000 CVE-2015-5352 CVE-2015-5600

CVE-2015-6563 CVE-2015-6564

Affected Products:

SUSE Linux Enterprise Server for VMWare 11-SP3

SUSE Linux Enterprise Server 11-SP3

SUSE Linux Enterprise Desktop 11-SP3

SUSE Linux Enterprise Debuginfo 11-SP3

https://www.suse.com/security/cve/CVE-2015-4000.html

https://www.suse.com/security/cve/CVE-2015-5352.html

https://www.suse.com/security/cve/CVE-2015-5600.html

https://www.suse.com/security/cve/CVE-2015-6563.html

https://www.suse.com/security/cve/CVE-2015-6564.html

https://bugzilla.suse.com/show_bug.cgi?id=673532

https://bugzilla.suse.com/show_bug.cgi?id=903649

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:1581-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical remote access openssh SUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.