Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP2:GA
patchinfo.10780
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.10780
<patchinfo incident="10780"> <issue tracker="bnc" id="1090671">Scenario: Bootstrap via XML-RPC a non-existing system caused a java exception</issue> <issue tracker="bnc" id="1121821">VUL-0: CVE-2019-6111: openssh,openssh-openssl1: scp client missing received object name validation</issue> <issue tracker="bnc" id="1121816">VUL-0: CVE-2019-6109: openssh-openssl1,openssh,putty: scp client spoofing via object name</issue> <issue tracker="bnc" id="1115550">SSHD termination of multichannel sessions with non-root users (error on 'mm_request_receive_expect')</issue> <issue tracker="bnc" id="1119183">sshd reload with multiple ports results in 'already in use' during bind</issue> <issue tracker="cve" id="2019-6109"/> <issue tracker="cve" id="2019-6111"/> <category>security</category> <rating>moderate</rating> <packager>vitezslav_cizek</packager> <description>This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers (bsc#1121816). - CVE-2019-6111: Properly validate object names received by the scp client to prevent arbitrary file overwrites when interacting with a malicious SSH server (bsc#1121821). Other issues fixed: - Fixed two race conditions in sshd relating to SIGHUP (bsc#1119183). - Returned proper reason for port forwarding failures (bsc#1090671). - Fixed SSHD termination of multichannel sessions with non-root users (bsc#1115550). </description> <summary>Security update for openssh</summary> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor