Security update for openssh SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1524-1 Final 1 1 2019-06-17T15:30:39Z current 2019-06-17T15:30:39Z 2019-06-17T15:30:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openssh This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers (bsc#1121816). - CVE-2019-6111: Properly validate object names received by the scp client to prevent arbitrary file overwrites when interacting with a malicious SSH server (bsc#1121821). Other issues fixed: - Fixed two race conditions in sshd relating to SIGHUP (bsc#1119183). - Returned proper reason for port forwarding failures (bsc#1090671). - Fixed a double free() in the KDF CAVS testing tool (bsc#1065237). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-1524,SUSE-OpenStack-Cloud-7-2019-1524,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-1524,SUSE-SLE-DESKTOP-12-SP3-2019-1524,SUSE-SLE-DESKTOP-12-SP4-2019-1524,SUSE-SLE-SAP-12-SP2-2019-1524,SUSE-SLE-SERVER-12-SP2-2019-1524,SUSE-SLE-SERVER-12-SP2-BCL-2019-1524,SUSE-SLE-SERVER-12-SP3-2019-1524,SUSE-SLE-SERVER-12-SP4-2019-1524,SUSE-Storage-4-2019-1524 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191524-1/ Link for SUSE-SU-2019:1524-1 https://lists.suse.com/pipermail/sle-security-updates/2019-June/005565.html E-Mail link for SUSE-SU-2019:1524-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1065237 SUSE Bug 1065237 https://bugzilla.suse.com/1090671 SUSE Bug 1090671 https://bugzilla.suse.com/1119183 SUSE Bug 1119183 https://bugzilla.suse.com/1121816 SUSE Bug 1121816 https://bugzilla.suse.com/1121821 SUSE Bug 1121821 https://bugzilla.suse.com/1131709 SUSE Bug 1131709 https://www.suse.com/security/cve/CVE-2019-6109/ SUSE CVE CVE-2019-6109 page https://www.suse.com/security/cve/CVE-2019-6111/ SUSE CVE CVE-2019-6111 page SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 7 openssh-7.2p2-74.42.8 openssh-askpass-gnome-7.2p2-74.42.10 openssh-cavs-7.2p2-74.42.8 openssh-fips-7.2p2-74.42.8 openssh-helpers-7.2p2-74.42.8 openssh-7.2p2-74.42.8 as a component of SUSE Enterprise Storage 4 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Enterprise Storage 4 openssh-fips-7.2p2-74.42.8 as a component of SUSE Enterprise Storage 4 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Enterprise Storage 4 openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Desktop 12 SP3 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Desktop 12 SP3 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Desktop 12 SP3 openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Desktop 12 SP4 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Desktop 12 SP4 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Desktop 12 SP4 openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-fips-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssh-fips-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-fips-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP3 openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP4 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Server 12 SP4 openssh-fips-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP4 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server 12 SP4 openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-fips-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-fips-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 openssh-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-fips-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-helpers-7.2p2-74.42.8 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-7.2p2-74.42.8 as a component of SUSE OpenStack Cloud 7 openssh-askpass-gnome-7.2p2-74.42.10 as a component of SUSE OpenStack Cloud 7 openssh-fips-7.2p2-74.42.8 as a component of SUSE OpenStack Cloud 7 openssh-helpers-7.2p2-74.42.8 as a component of SUSE OpenStack Cloud 7 An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c. CVE-2019-6109 SUSE Enterprise Storage 4:openssh-7.2p2-74.42.8 SUSE Enterprise Storage 4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Enterprise Storage 4:openssh-fips-7.2p2-74.42.8 SUSE Enterprise Storage 4:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP3:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP3:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Desktop 12 SP3:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP4:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Desktop 12 SP4:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP3:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP3:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP3:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP3:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP4:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP4:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP4:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-helpers-7.2p2-74.42.8 SUSE OpenStack Cloud 7:openssh-7.2p2-74.42.8 SUSE OpenStack Cloud 7:openssh-askpass-gnome-7.2p2-74.42.10 SUSE OpenStack Cloud 7:openssh-fips-7.2p2-74.42.8 SUSE OpenStack Cloud 7:openssh-helpers-7.2p2-74.42.8 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191524-1/ https://www.suse.com/security/cve/CVE-2019-6109.html CVE-2019-6109 https://bugzilla.suse.com/1121571 SUSE Bug 1121571 https://bugzilla.suse.com/1121816 SUSE Bug 1121816 https://bugzilla.suse.com/1121818 SUSE Bug 1121818 https://bugzilla.suse.com/1121821 SUSE Bug 1121821 https://bugzilla.suse.com/1138392 SUSE Bug 1138392 https://bugzilla.suse.com/1144902 SUSE Bug 1144902 https://bugzilla.suse.com/1144903 SUSE Bug 1144903 https://bugzilla.suse.com/1148884 SUSE Bug 1148884 An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). CVE-2019-6111 SUSE Enterprise Storage 4:openssh-7.2p2-74.42.8 SUSE Enterprise Storage 4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Enterprise Storage 4:openssh-fips-7.2p2-74.42.8 SUSE Enterprise Storage 4:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP3:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP3:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Desktop 12 SP3:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP4:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Desktop 12 SP4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Desktop 12 SP4:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-BCL:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP2-LTSS:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP3:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP3:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP3:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP3:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP4:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server 12 SP4:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server 12 SP4:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssh-helpers-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-askpass-gnome-7.2p2-74.42.10 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-fips-7.2p2-74.42.8 SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-helpers-7.2p2-74.42.8 SUSE OpenStack Cloud 7:openssh-7.2p2-74.42.8 SUSE OpenStack Cloud 7:openssh-askpass-gnome-7.2p2-74.42.10 SUSE OpenStack Cloud 7:openssh-fips-7.2p2-74.42.8 SUSE OpenStack Cloud 7:openssh-helpers-7.2p2-74.42.8 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191524-1/ https://www.suse.com/security/cve/CVE-2019-6111.html CVE-2019-6111 https://bugzilla.suse.com/1121571 SUSE Bug 1121571 https://bugzilla.suse.com/1121816 SUSE Bug 1121816 https://bugzilla.suse.com/1121818 SUSE Bug 1121818 https://bugzilla.suse.com/1121821 SUSE Bug 1121821 https://bugzilla.suse.com/1123028 SUSE Bug 1123028 https://bugzilla.suse.com/1123220 SUSE Bug 1123220 https://bugzilla.suse.com/1131109 SUSE Bug 1131109 https://bugzilla.suse.com/1138392 SUSE Bug 1138392 https://bugzilla.suse.com/1144902 SUSE Bug 1144902 https://bugzilla.suse.com/1144903 SUSE Bug 1144903 https://bugzilla.suse.com/1148884 SUSE Bug 1148884 https://bugzilla.suse.com/1201840 SUSE Bug 1201840