Security update for openssh SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:3230-1 Final 1 1 2017-12-07T12:22:05Z current 2017-12-07T12:22:05Z 2017-12-07T12:22:05Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssh This update for openssh fixes the following issues: Security issue fixed: - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server (bsc#1065000). Bug fixes: - FIPS: Startup selfchecks (bsc#1068310). - FIPS: Silent complaints about unsupported key exchange methods (bsc#1006166). - Refine handling of sockets for X11 forwarding to remove reintroduced CVE-2008-1483 (bsc#1069509). - Test configuration before running daemon to prevent looping resulting in service shutdown (bsc#1048367) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-CAASP-ALL-2017-2009,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2017-2009,SUSE-SLE-DESKTOP-12-SP2-2017-2009,SUSE-SLE-DESKTOP-12-SP3-2017-2009,SUSE-SLE-RPI-12-SP2-2017-2009,SUSE-SLE-SERVER-12-SP2-2017-2009,SUSE-SLE-SERVER-12-SP3-2017-2009 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20173230-1/ Link for SUSE-SU-2017:3230-1 https://lists.suse.com/pipermail/sle-security-updates/2017-December/003476.html E-Mail link for SUSE-SU-2017:3230-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1006166 SUSE Bug 1006166 https://bugzilla.suse.com/1048367 SUSE Bug 1048367 https://bugzilla.suse.com/1065000 SUSE Bug 1065000 https://bugzilla.suse.com/1068310 SUSE Bug 1068310 https://bugzilla.suse.com/1069509 SUSE Bug 1069509 https://www.suse.com/security/cve/CVE-2008-1483/ SUSE CVE CVE-2008-1483 page https://www.suse.com/security/cve/CVE-2017-15906/ SUSE CVE CVE-2017-15906 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-7.2p2-74.11.1 openssh-askpass-gnome-7.2p2-74.11.3 openssh-helpers-7.2p2-74.11.1 openssh-fips-7.2p2-74.11.1 openssh-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 openssh-askpass-gnome-7.2p2-74.11.3 as a component of SUSE Linux Enterprise Desktop 12 SP2 openssh-helpers-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 openssh-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 openssh-askpass-gnome-7.2p2-74.11.3 as a component of SUSE Linux Enterprise Desktop 12 SP3 openssh-helpers-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 openssh-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 openssh-askpass-gnome-7.2p2-74.11.3 as a component of SUSE Linux Enterprise Server 12 SP2 openssh-fips-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 openssh-helpers-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server 12 SP2 openssh-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-askpass-gnome-7.2p2-74.11.3 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-fips-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-helpers-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openssh-askpass-gnome-7.2p2-74.11.3 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openssh-fips-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openssh-helpers-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 openssh-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-askpass-gnome-7.2p2-74.11.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-fips-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-helpers-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-askpass-gnome-7.2p2-74.11.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-fips-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-helpers-7.2p2-74.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs. CVE-2008-1483 SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Desktop 12 SP3:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Desktop 12 SP3:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Desktop 12 SP3:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP3:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP3:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server 12 SP3:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP3:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-helpers-7.2p2-74.11.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173230-1/ https://www.suse.com/security/cve/CVE-2008-1483.html CVE-2008-1483 https://bugzilla.suse.com/1069509 SUSE Bug 1069509 https://bugzilla.suse.com/373527 SUSE Bug 373527 https://bugzilla.suse.com/585630 SUSE Bug 585630 https://bugzilla.suse.com/647633 SUSE Bug 647633 https://bugzilla.suse.com/706386 SUSE Bug 706386 The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files. CVE-2017-15906 SUSE Linux Enterprise Desktop 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Desktop 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Desktop 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Desktop 12 SP3:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Desktop 12 SP3:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Desktop 12 SP3:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server 12 SP2:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP3:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP3:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server 12 SP3:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server 12 SP3:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-askpass-gnome-7.2p2-74.11.3 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-fips-7.2p2-74.11.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-helpers-7.2p2-74.11.1 moderate 4 AV:N/AC:L/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173230-1/ https://www.suse.com/security/cve/CVE-2017-15906.html CVE-2017-15906 https://bugzilla.suse.com/1064285 SUSE Bug 1064285 https://bugzilla.suse.com/1065000 SUSE Bug 1065000 https://bugzilla.suse.com/1074115 SUSE Bug 1074115 https://bugzilla.suse.com/1079488 SUSE Bug 1079488 https://bugzilla.suse.com/1090163 SUSE Bug 1090163 https://bugzilla.suse.com/1099316 SUSE Bug 1099316 https://bugzilla.suse.com/1138392 SUSE Bug 1138392